keycloak 18.10.0 Helm chart

Name: keycloak Helm chart 18.10.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codecentric

Scored 20 Oct 2026

Open Source Identity and Access Management For Modern Applications and Services

Version 18.10.0 1 year agoapp version 17.0.1-legacy 48Artifact Hub

keycloak 18.10.0 deploys 3 container images: bitnami/postgresql, library/busybox and quay.io/keycloak/keycloak. Across the 2 measured, 485 findings — 7 critical, 17 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

8,073717175286

485 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	11.14.0-debian-10-r28	—	unmeasured
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	717175286	8,073

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

286 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-8g9r-9wjw-37j4	keycloak-services@17.0.1	no fix listed
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@17.0.1	no fix listed
Low	GHSA-3x3v-w654-m28m	undertow-core@2.2.14.Final	no fix listed
Low	GHSA-wxmm-q36w-r9xj	mariadb-java-client@2.5.4	2.7.14
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@17.0.1	26.4.12
Low	GHSA-5565-3c98-g6jc	wildfly-elytron@1.18.3.Final	2.2.9.Final
Low	GHSA-5565-3c98-g6jc	wildfly-elytron-http-oidc@1.18.3.Final	2.2.9.Final
Low	RHSA-2026:73511	gawk@4.2.1-2.el8	0:4.2.1-5.el8_10
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.9	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@17.0.1	no fix listed
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.25
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@17.0.1	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@17.0.1	22.0.12
Low	GHSA-63v5-26vq-m4vm	keycloak-services@17.0.1	no fix listed
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@17.0.1	22.0.10
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-jdbc@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@12.1.7.Final	14.0.25.Final
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@17.0.1	26.4.13
Low	GHSA-f7jh-m6wp-jm7f	hal-console@3.4.4.Final	3.7.11.Final
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@17.0.1	no fix listed
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@17.0.1	26.7.0
Low	GHSA-g78x-7vwx-9f58	keycloak-services@17.0.1	26.4.9
Low	GHSA-xh32-c9wx-phrp	keycloak-services@17.0.1	no fix listed
Low	GHSA-594w-2fwp-jwrc	keycloak-services@17.0.1	no fix listed
Low	GHSA-6q37-7866-h27j	keycloak-services@17.0.1	26.5.0
Low	GHSA-7g5x-9c4v-4w5r	keycloak-services@17.0.1	26.4.4
Low	GHSA-8hc5-rmgf-qx6p	keycloak-ldap-federation@17.0.1	23.0.1
Low	GHSA-8hc5-rmgf-qx6p	keycloak-services@17.0.1	23.0.1
Low	RHSA-2026:36734	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.6
Low	GHSA-6vgw-5pg2-w6jp	pip@9.0.3	26.0
Low	GHSA-mwm4-5qwr-g9pf	keycloak-services@17.0.1	18.0.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.10.0latest	1 year ago	17.0.1-legacy	717175286	8,073

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codecentric/keycloak.svg)](https://charts.stackradar.io/charts/codecentric/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.