keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

account-service

Scored 14 Sept 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub

keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

7,713618160281

465 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	618160281	7,713

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

160 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2022:7106	zlib@1.2.11-17.el8	0:1.2.11-19.el8_6
Medium	GHSA-rc2w-r4jq-7pfx	xalan@2.7.1.jbossorg-5	2.7.2
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.0.3	6.4.0
Medium	RHSA-2025:11035	lz4@1.8.3-3.el8_4	0:1.8.3-5.el8_10
Medium	GHSA-24rp-q3w6-vc56	postgresql@42.2.5	42.2.28
Medium	RHSA-2022:7704	glib2@2.56.4-156.el8	0:2.56.4-159.el8
Medium	RHSA-2023:7151	python3@3.6.8-41.el8	0:3.6.8-56.el8_9
Medium	RHSA-2023:7176	python-pip@9.0.3-20.el8	0:9.0.3-23.el8
Medium	RHSA-2023:0110	sqlite@3.26.0-15.el8	0:3.26.0-17.el8_7
Medium	RHEA-2023:3850	krb5@1.18.2-14.el8	0:1.18.2-25.el8_8
Medium	RHSA-2022:6457	python3@3.6.8-41.el8	0:3.6.8-47.el8_6
Medium	RHSA-2022:1537	gzip@1.9-12.el8	0:1.9-13.el8_5
Medium	RHSA-2022:4991	xz@5.2.4-3.el8	0:5.2.4-4.el8_6
Medium	GHSA-fhw8-8j55-vwgq	sshd-core@2.7.0	2.9.2
Medium	GHSA-fhw8-8j55-vwgq	sshd-common@2.7.0	2.9.2
Medium	GHSA-h65f-jvqw-m9fj	xercesImpl@2.12.0.SP03	2.12.2
Medium	RHSA-2022:1986	python3@3.6.8-41.el8	0:3.6.8-45.el8
Medium	GHSA-r7pg-v2c8-mfg3	avro@1.7.6	1.11.4
Medium	RHSA-2023:0833	python3@3.6.8-41.el8	0:3.6.8-48.el8_7.1
Medium	GHSA-x3x3-qwjq-8gj4	cxf-core@3.4.5	3.4.10
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.12.1	2.12.6.1
Medium	RHSA-2022:5313	curl@7.61.1-22.el8	0:7.61.1-22.el8_6.3
Medium	GHSA-qmgx-j96g-4428	cxf-rt-databinding-aegis@3.4.5	3.5.8
Medium	RHSA-2022:5314	expat@2.2.5-4.el8_5.3	0:2.2.5-8.el8_6.2
Medium	GHSA-w6qf-42m7-vh68	undertow-core@2.2.14.Final	2.2.31.Final
Medium	RHSA-2026:26275	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-16.el8_6
Medium	GHSA-88cc-g835-76rp	postgresql@42.2.5	42.2.13
Medium	RHSA-2022:1442	java-11-openjdk@1:11.0.14.1.1-2.el8_5	1:11.0.15.0.9-2.el8_5
Medium	RHSA-2025:7540	libjpeg-turbo@1.5.3-12.el8	0:1.5.3-14.el8_10
Medium	GHSA-2cww-fgmg-4jqc	keycloak-services@17.0.1	24.0.5
Medium	RHSA-2022:5317	libxml2@2.9.7-12.el8_5	0:2.9.7-13.el8_6.1
Medium	GHSA-3p86-9955-h393	org.eclipse.jgit@5.13.0.202109080827-r	5.13.3.202401111512-r
Medium	GHSA-7f88-5hhx-67m2	xnio-api@3.8.5.Final	3.8.14.Final
Medium	RHSA-2022:7745	freetype@2.9.1-4.el8_3.1	0:2.9.1-9.el8
Medium	RHSA-2022:5809	pcre2@10.32-2.el8	0:10.32-3.el8_6
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.2.5	42.7.11
Medium	RHSA-2023:7877	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-12.el8_9
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5530	python-setuptools@39.2.0-6.el8	0:39.2.0-8.el8_10
Medium	GHSA-gpvv-69j7-gwj8	pip@9.0.3	19.2
Medium	GHSA-75p6-52g3-rqc8	keycloak-services@17.0.1	18.0.0
Medium	RHSA-2022:6206	systemd@239-51.el8_5.5	0:239-58.el8_6.4
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	GHSA-xpp6-8r3j-ww43	undertow-core@2.2.14.Final	2.2.34.Final
Medium	GHSA-j382-5jj3-vw4j	undertow-core@2.2.14.Final	2.2.39.Final
Medium	RHSA-2022:6878	expat@2.2.5-4.el8_5.3	0:2.2.5-8.el8_6.3
Medium	RHBA-2022:2065	libtirpc@1.1.4-5.el8	0:1.1.4-6.el8
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.12.1	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.12.1	2.12.7.1
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.19.2	3.25.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.4.5latest	6 months ago	17.0.1-legacy	618160281	7,713

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/account-service/keycloak.svg)](https://charts.stackradar.io/charts/account-service/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.