keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

account-service

Scored 14 Sept 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub

keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

7,713618160281

465 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	618160281	7,713

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

465 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-7g45-4rm6-3mm3	guava@30.1-jre	32.0.0-android
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@2.5.4	2.7.14
Low	RHSA-2026:55804	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.3
Low	GHSA-xhpr-465j-7p9q	keycloak-services@17.0.1	26.0.13
Low	GHSA-cq42-vhv7-xr7p	keycloak-services@17.0.1	24.0.0
Low	GHSA-rx66-hj7g-28h7	keycloak-services@17.0.1	26.5.7
Low	RHSA-2026:11349	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.4
Low	GHSA-hm32-hfmw-rhvg	keycloak-services@17.0.1	no fix listed
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	GHSA-v4jw-m6rm-399h	keycloak-server-spi-private@17.0.1	26.5.2
Low	GHSA-93ww-43rr-79v3	keycloak-core@17.0.1	26.0.6
Low	GHSA-5mg8-w23w-74h3	guava@30.1-jre	32.0.0-android
Low	GHSA-64w3-5q9m-68xf	keycloak-services@17.0.1	26.2.11
Low	GHSA-p3v8-fm5p-v84h	keycloak-services@17.0.1	no fix listed
Low	GHSA-64gp-r758-8pfm	hal-console@3.4.4.Final	3.7.7.Final
Low	GHSA-g8vr-x4qh-25qg	keycloak-services@17.0.1	26.6.3
Low	GHSA-f5h4-wmp5-xhg6	keycloak-services@17.0.1	21.1.2
Low	GHSA-f5h4-wmp5-xhg6	keycloak-server-spi-private@17.0.1	21.1.2
Low	GHSA-933f-rg6j-f46p	keycloak-services@17.0.1	26.4.12
Low	GHSA-rg35-5v25-mqvp	keycloak-services@17.0.1	26.0.0
Low	GHSA-q6h7-xxp7-7429	keycloak-services@17.0.1	no fix listed
Low	GHSA-q35r-vvhv-vx5h	keycloak-model-jpa@17.0.1	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-services@17.0.1	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-server-spi-private@17.0.1	26.5.6
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.11.4	2.13.0
Low	GHSA-wcvj-vpvw-9rr5	keycloak-services@17.0.1	no fix listed
Low	GHSA-jp4c-xjxw-mgf9	pip@9.0.3	26.1
Low	GHSA-3x3v-w654-m28m	undertow-core@2.2.14.Final	no fix listed
Low	GHSA-8g9r-9wjw-37j4	keycloak-services@17.0.1	no fix listed
Low	GHSA-5565-3c98-g6jc	wildfly-elytron@1.18.3.Final	2.2.9.Final
Low	GHSA-5565-3c98-g6jc	wildfly-elytron-http-oidc@1.18.3.Final	2.2.9.Final
Low	GHSA-fjf4-6f34-w64q	keycloak-services@17.0.1	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-server-spi-private@17.0.1	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-services@17.0.1	no fix listed
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.9	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@17.0.1	no fix listed
Low	RHSA-2026:61248	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.7
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@17.0.1	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@17.0.1	26.4.12
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@17.0.1	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@17.0.1	22.0.12
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.25
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@17.0.1	22.0.10
Low	GHSA-63v5-26vq-m4vm	keycloak-services@17.0.1	no fix listed
Low	GHSA-gg57-587f-h5v6	infinispan-core@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-jdbc@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@12.1.7.Final	14.0.25.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.4.5latest	6 months ago	17.0.1-legacy	618160281	7,713

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/account-service/keycloak.svg)](https://charts.stackradar.io/charts/account-service/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.