keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codecentric

Scored 20 Oct 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.10.0 1 year agoapp version 17.0.1-legacy 48Artifact Hub

keycloak 18.10.0 deploys 3 container images: bitnami/postgresql, library/busybox and quay.io/keycloak/keycloak. Across the 2 measured, 485 findings — 7 critical, 17 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

8,073717175286

485 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	11.14.0-debian-10-r28	—	unmeasured
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	717175286	8,073

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

286 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-wf93-45jw-7689	pip@9.0.3	26.1.2
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.19.2	3.19.6
Low	GHSA-jmj6-p2j9-68cp	wildfly-elytron@1.18.3.Final	1.20.3.Final
Low	RHSA-2023:5742	java-11-openjdk@1:11.0.14.1.1-2.el8_5	1:11.0.21.0.9-2.el8
Low	GHSA-69fp-7c8p-crjr	keycloak-services@17.0.1	24.0.5
Low	RHSA-2024:3268	krb5@1.18.2-14.el8	0:1.18.2-27.el8_10
Low	RHSA-2026:2389	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10
Low	RHSA-2026:42090	glib2@2.56.4-156.el8	0:2.56.4-170.el8_10
Low	RHSA-2024:9502	expat@2.2.5-4.el8_5.3	0:2.2.5-16.el8_10
Low	GHSA-cjm2-j6cm-6p6m	keycloak-services@17.0.1	26.5.7
Low	RHSA-2026:15953	glib2@2.56.4-156.el8	0:2.56.4-169.el8_10
Low	RHBA-2024:6680	nss@3.67.0-7.el8_5	0:3.101.0-7.el8_8
Low	GHSA-65r4-943x-97jj	jsoup@1.14.2	1.23.2
Low	GHSA-gc7q-jgjv-vjr2	keycloak-services@17.0.1	22.0.12
Low	RHSA-2026:81613	pcre2@10.32-2.el8	0:10.32-4.el8_10
Low	GHSA-9wmf-xf3h-r8pr	jberet-core@1.3.10.Final	2.2.1.Final
Low	GHSA-qr6x-62gq-4ccp	wildfly-server@18.0.4.Final	27.0.1.Final
Low	RHSA-2025:12450	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.2
Low	RHSA-2025:14135	libarchive@3.3.3-3.el8_5	0:3.3.3-6.el8_10
Low	GHSA-hj93-h7pg-fh6v	keycloak-services@17.0.1	26.5.7
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	RHSA-2025:23383	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.9
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.11.4	2.18.11
Low	RHSA-2024:4265	cups@1:2.2.6-40.el8	1:2.2.6-60.el8_10
Low	RHSA-2026:2128	python3@3.6.8-41.el8	0:3.6.8-73.el8_10
Low	GHSA-c9h6-v78w-52wj	keycloak-services@17.0.1	22.0.10
Low	RHSA-2025:8686	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.22
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.1	2.25.5
Low	GHSA-w97f-w3hq-36g2	keycloak-core@17.0.1	24.0.0
Low	RHSA-2026:22721	expat@2.2.5-4.el8_5.3	0:2.5.0-2.el8_10
Low	RHSA-2022:2031	libssh@0.9.4-3.el8	0:0.9.6-3.el8
Low	RHSA-2026:62218	libssh@0.9.4-3.el8	0:0.9.6-17.el8_10
Low	RHSA-2025:4051	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_10.3
Low	GHSA-c7xw-p58w-h6fj	keycloak-core@17.0.1	22.0.1
Low	GHSA-32h4-44jj-c5vx	keycloak-services@17.0.1	26.6.4
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.12.1	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.12.1	2.18.11
Low	GHSA-3qh5-qqj2-c78f	keycloak-services@17.0.1	21.1.2
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.69	1.78
Low	GHSA-rr5q-3xwr-f323	keycloak-services@17.0.1	26.6.3
Low	GHSA-rr5q-3xwr-f323	keycloak-server-spi-private@17.0.1	26.6.3
Low	GHSA-hq3p-w4xv-x7vp	keycloak-services@17.0.1	26.6.2
Low	GHSA-m6q9-p373-g5q8	keycloak-services@17.0.1	22.0.10
Low	GHSA-xvr9-35cr-46v9	mariadb-java-client@2.5.4	2.7.14
Low	GHSA-w4p5-rfh6-cwrv	keycloak-services@17.0.1	26.6.2
Low	RHSA-2022:5056	cups@1:2.2.6-40.el8	1:2.2.6-45.el8_6.2
Low	GHSA-mrv8-pqfj-7gp5	keycloak-services@17.0.1	22.0.10
Low	RHSA-2024:3203	systemd@239-51.el8_5.5	0:239-82.el8
Low	RHSA-2026:16799	krb5@1.18.2-14.el8	0:1.18.2-34.el8_10
Low	GHSA-w354-2f3c-qvg9	keycloak-services@17.0.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.10.0latest	1 year ago	17.0.1-legacy	717175286	8,073

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codecentric/keycloak.svg)](https://charts.stackradar.io/charts/codecentric/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.