keycloak Helm chart
account-serviceVerified publisherScored 14 Sept 2026
Open Source Identity and Access Management For Modern Applications and Services
Latest 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub
keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.32 | 0000 | 0 |
| quay.io/ | 17.0.1-legacy | 618160281 | 7,713 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-h4h5-3hr4-j3g2 | protobuf-java | 3.19.6 |
| Low | RHSA-2023:5742 | java-11-openjdk | 1:11.0.21.0.9-2.el8 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | RHSA-2025:23383 | curl | 0:7.61.1-34.el8_10.9 |
| Low | RHSA-2024:0119 | libxml2 | 0:2.9.7-18.el8_9 |
| Low | RHSA-2024:4265 | cups | 1:2.2.6-60.el8_10 |
| Low | GHSA-c9h6-v78w-52wj | keycloak-services | 22.0.10 |
| Low | RHSA-2022:7715 | libxml2 | 0:2.9.7-15.el8 |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | RHSA-2025:14135 | libarchive | 0:3.3.3-6.el8_10 |
| Low | GHSA-w97f-w3hq-36g2 | keycloak-core | 24.0.0 |
| Low | RHSA-2022:2031 | libssh | 0:0.9.6-3.el8 |
| Low | RHSA-2026:2128 | python3 | 0:3.6.8-73.el8_10 |
| Low | RHSA-2026:22721 | expat | 0:2.5.0-2.el8_10 |
| Low | GHSA-ghvc-7hp8-2g2v | cxf-core | 3.6.12 |
| Low | RHSA-2025:4051 | gnutls | 0:3.6.16-8.el8_10.3 |
| Low | GHSA-c7xw-p58w-h6fj | keycloak-core | 22.0.1 |
| Low | RHSA-2025:8686 | glibc | 0:2.28-251.el8_10.22 |
| Low | GHSA-3qh5-qqj2-c78f | keycloak-services | 21.1.2 |
| Low | GHSA-qr6x-62gq-4ccp | wildfly-server | 27.0.1.Final |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | GHSA-f2hx-5fx3-hmcv | keycloak-services | 26.5.7 |
| Low | GHSA-m6q9-p373-g5q8 | keycloak-services | 22.0.10 |
| Low | GHSA-mrv8-pqfj-7gp5 | keycloak-services | 22.0.10 |
| Low | GHSA-m297-3jv9-m927 | keycloak-services | 26.5.5 |
| Low | RHSA-2022:5056 | cups | 1:2.2.6-45.el8_6.2 |
| Low | RHSA-2024:3203 | systemd | 0:239-82.el8 |
| Low | GHSA-w354-2f3c-qvg9 | keycloak-services | no fix listed |
| Low | GHSA-hj93-h7pg-fh6v | keycloak-services | 26.5.7 |
| Low | GHSA-cjm2-j6cm-6p6m | keycloak-services | 26.5.7 |
| Low | RHSA-2025:12450 | libxml2 | 0:2.9.7-21.el8_10.2 |
| Low | GHSA-46c8-635v-68r2 | keycloak-services | 22.0.10 |
| Low | RHSA-2025:4049 | libtasn1 | 0:4.13-5.el8_10 |
| Low | RHSA-2026:57462 | curl | 0:7.61.1-34.el8_10.13 |
| Low | RHSA-2024:10779 | python3 | 0:3.6.8-69.el8_10 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk15on | 1.78 |
| Low | GHSA-mjmq-gwgm-5qhm | sshd-common | 2.9.3 |
| Low | GHSA-jw7r-rxff-gv24 | apache-mime4j-core | 0.8.10 |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk15on | 1.84 |
| Low | RHSA-2024:3347 | python3 | 0:3.6.8-62.el8_10 |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk15on | 1.78 |
| Low | RHSA-2024:3233 | libssh | 0:0.9.6-14.el8 |
| Low | RHSA-2026:62218 | libssh | 0:0.9.6-17.el8_10 |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk15on | no fix listed |
| Low | GHSA-8rmm-gm28-pj8q | keycloak-services | 22.0.10 |
| Low | GHSA-j628-q885-8gr5 | keycloak-services | 22.0.9 |
| Low | RHSA-2026:0241 | libpng | 2:1.6.34-9.el8_10 |
| Low | RHSA-2026:0991 | glib2 | 0:2.56.4-168.el8_10 |
| Low | GHSA-33hj-rcmx-86mv | undertow-core | 2.2.39.Final |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 18.4.5latest | 6 months ago | 17.0.1-legacy | 618160281 | 7,713 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.