keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codecentric

Scored 20 Oct 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.10.0 1 year agoapp version 17.0.1-legacy 48Artifact Hub

keycloak 18.10.0 deploys 3 container images: bitnami/postgresql, library/busybox and quay.io/keycloak/keycloak. Across the 2 measured, 485 findings — 7 critical, 17 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

8,073717175286

485 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	11.14.0-debian-10-r28	—	unmeasured
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	717175286	8,073

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

286 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:1631	python3@3.6.8-41.el8	0:3.6.8-72.el8_10
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.2.3	2.2.6
Low	GHSA-v6w3-2prq-h95f	jakarta.el@3.0.3.jbossorg-4	3.0.4
Low	GHSA-7pwc-h2j2-rjgj	libthrift@0.14.1	0.23.0
Low	RHSA-2026:72448	expat@2.2.5-4.el8_5.3	0:2.5.0-4.el8_10
Low	GHSA-g36m-9g3m-2vmp	neethi@3.1.1	3.2.2
Low	GHSA-ghvc-7hp8-2g2v	cxf-core@3.4.5	3.6.12
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.11.4	2.18.8
Low	GHSA-488m-w9fp-5mm2	protostream@4.4.1.Final	4.6.2.Final
Low	GHSA-5rxp-2rhr-qwqv	keycloak-services@17.0.1	22.0.12
Low	GHSA-v4mm-q8fv-r2w5	wildfly-elytron-realm-token@1.18.3.Final	no fix listed
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.19.2	3.19.6
Low	RHSA-2026:61766	glib2@2.56.4-156.el8	0:2.56.4-177.el8_10
Low	RHSA-2026:26354	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.5
Low	RHSA-2025:14560	python3@3.6.8-41.el8	0:3.6.8-71.el8_10
Low	RHSA-2022:7715	libxml2@2.9.7-12.el8_5	0:2.9.7-15.el8
Low	RHSA-2024:0119	libxml2@2.9.7-12.el8_5	0:2.9.7-18.el8_9
Low	RHSA-2025:22063	cups@1:2.2.6-40.el8	1:2.2.6-64.el8_10
Low	RHSA-2022:5311	libgcrypt@1.8.5-6.el8	0:1.8.5-7.el8_6
Low	RHSA-2026:56219	python3@3.6.8-41.el8	0:3.6.8-78.el8_10
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.22.Final	6.2.0.CR1
Low	RHSA-2025:18286	libssh@0.9.4-3.el8	0:0.9.6-15.el8_10
Low	RHSA-2022:7720	e2fsprogs@1.45.6-2.el8	0:1.45.6-5.el8
Low	GHSA-26qx-4m49-6cfr	wildfly-controller@18.0.4.Final	22.0.0.Final
Low	GHSA-ch7q-gpff-h9hp	undertow-core@2.2.14.Final	2.2.34.Final
Low	RHSA-2023:0200	java-11-openjdk@1:11.0.14.1.1-2.el8_5	1:11.0.18.0.10-2.el8_7
Low	RHSA-2023:4524	libcap@2.26-5.el8	0:2.48-5.el8_8
Low	RHSA-2026:71641	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.9
Low	RHSA-2026:0337	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-14.el8_10
Low	GHSA-7g24-qg88-p43q	jose4j@0.7.9	0.9.3
Low	RHSA-2026:39320	python3@3.6.8-41.el8	0:3.6.8-77.el8_10
Low	RHSA-2024:0105	nss@3.67.0-7.el8_5	0:3.90.0-4.el8_9
Low	RHSA-2023:4529	libxml2@2.9.7-12.el8_5	0:2.9.7-16.el8_8.1
Low	GHSA-vrpq-qp53-qv56	org.eclipse.jgit@5.13.0.202109080827-r	5.13.4.202507202350-r
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@17.0.1	26.6.2
Low	RHSA-2023:3837	systemd@239-51.el8_5.5	0:239-74.el8_8.2
Low	GHSA-hcvw-475w-8g7p	keycloak-services@17.0.1	26.2.13
Low	RHSA-2024:0155	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_9
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.12.1	2.14.0
Low	GHSA-m297-3jv9-m927	keycloak-services@17.0.1	26.5.5
Low	GHSA-w33c-445m-f8w7	okio@1.17.5	1.17.6
Low	GHSA-f2hx-5fx3-hmcv	keycloak-services@17.0.1	26.5.7
Low	GHSA-v76w-3ph8-vm66	undertow-core@2.2.14.Final	2.2.31.Final
Low	GHSA-hw58-3793-42gg	keycloak-services@17.0.1	26.2.2
Low	RHSA-2026:3042	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-15.el8_6
Low	RHSA-2025:13203	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.3
Low	RHSA-2023:0842	tar@2:1.30-5.el8	2:1.30-6.el8_7.1
Low	RHSA-2026:4728	libpng@2:1.6.34-5.el8	2:1.6.34-10.el8_10
Low	RHSA-2026:36728	libtasn1@4.13-3.el8	0:4.13-6.el8_10
Low	GHSA-6qvw-249j-h44c	jose4j@0.7.9	0.9.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.10.0latest	1 year ago	17.0.1-legacy	717175286	8,073

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codecentric/keycloak.svg)](https://charts.stackradar.io/charts/codecentric/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.