keycloak 1.3.0 Helm chart

Name: keycloak Helm chart 1.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

bysamio

Scored 14 Sept 2026

A Helm chart for Keycloak using BySamio hardened Docker image (runs as UID 1001)

Version 1.3.0 1 month agoapp version 26.7.0 0Artifact Hub

keycloak 1.3.0 deploys 2 container images: ghcr.io/bysamio/postgresql and ghcr.io/bysamio/keycloak. Across them, 50 findings — 0 critical, 0 high. The highest contribution is GHSA-4gv3-mc9p-5wqc in keycloak-services 26.7.0, fixed in 26.7.2.

Radar Score

57500941

50 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/bysamio/postgresql	17.10-alpine	0004	34
ghcr.io/bysamio/keycloak×2	26.7.0	00937	541

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

50 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-4gv3-mc9p-5wqc	keycloak-services@26.7.0	26.7.2
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.135.Final	4.1.136.Final
Medium	GHSA-q6cq-mhr2-jmr5	netty-codec-haproxy@4.1.135.Final	4.1.136.Final
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	GHSA-m494-w24q-6f7w	mssql-jdbc@13.2.1	13.2.1.jre11
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.16.3	1.16.6
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w737-wx49-qj23	micrometer-core@1.16.3	1.16.6
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.135.Final	4.1.136.Final
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-794g-x443-36f7	keycloak-services@26.7.0	no fix listed
Low	GHSA-j92g-9f8w-j867	postgresql@42.7.11	42.7.12
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	ALPINE-CVE-2026-76642	util-linux@2.42.1-r0	2.42.3-r0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.21.4	2.21.5
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.135.Final	4.1.137.Final
Low	GHSA-xvr9-35cr-46v9	mariadb-java-client@3.5.7	3.5.9
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.135.Final	4.1.137.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-8hxp-qmph-w5gq	keycloak-model-storage-services@26.7.0	no fix listed
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.21.4	2.21.5
Low	ALPINE-CVE-2026-76957	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.135.Final	4.1.136.Final
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@3.5.7	3.5.9
Low	ALPINE-CVE-2026-78410	util-linux@2.42.1-r0	2.42.3-r0
Low	ALPINE-CVE-2026-78409	util-linux@2.42.1-r0	2.42.3-r0
Low	GHSA-jgwc-jh89-rpgq	keycloak-quarkus-server@26.7.0	no fix listed
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@3.5.7	3.5.9
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.135.Final	4.1.137.Final
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.21.4	2.21.5
Low	GHSA-wh89-7897-x99h	netty-codec-haproxy@4.1.135.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	3 days ago	26.7.3	0013	42
1.3.0	1 month ago	26.7.0	00941	575

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/bysamio/keycloak.svg)](https://charts.stackradar.io/charts/bysamio/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.