keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codecentric

Scored 21 Oct 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.10.0 1 year agoapp version 17.0.1-legacy 48Artifact Hub

keycloak 18.10.0 deploys 3 container images: bitnami/postgresql, library/busybox and quay.io/keycloak/keycloak. Across the 2 measured, 486 findings — 7 critical, 17 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

8,088717175287

486 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	11.14.0-debian-10-r28	—	unmeasured
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	717175287	8,088

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

486 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-8g9r-9wjw-37j4	keycloak-services@17.0.1	no fix listed
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@17.0.1	no fix listed
Low	GHSA-3x3v-w654-m28m	undertow-core@2.2.14.Final	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@17.0.1	26.4.12
Low	GHSA-wxmm-q36w-r9xj	mariadb-java-client@2.5.4	2.7.14
Low	GHSA-5565-3c98-g6jc	wildfly-elytron@1.18.3.Final	2.2.9.Final
Low	GHSA-5565-3c98-g6jc	wildfly-elytron-http-oidc@1.18.3.Final	2.2.9.Final
Low	RHSA-2026:73511	gawk@4.2.1-2.el8	0:4.2.1-5.el8_10
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.9	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@17.0.1	no fix listed
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.25
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@17.0.1	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@17.0.1	22.0.12
Low	GHSA-63v5-26vq-m4vm	keycloak-services@17.0.1	no fix listed
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@17.0.1	22.0.10
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-jdbc@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@12.1.7.Final	14.0.25.Final
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@17.0.1	26.4.13
Low	GHSA-f7jh-m6wp-jm7f	hal-console@3.4.4.Final	3.7.11.Final
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@17.0.1	no fix listed
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@17.0.1	26.7.0
Low	GHSA-g78x-7vwx-9f58	keycloak-services@17.0.1	26.4.9
Low	GHSA-xh32-c9wx-phrp	keycloak-services@17.0.1	no fix listed
Low	GHSA-594w-2fwp-jwrc	keycloak-services@17.0.1	no fix listed
Low	GHSA-6q37-7866-h27j	keycloak-services@17.0.1	26.5.0
Low	GHSA-7g5x-9c4v-4w5r	keycloak-services@17.0.1	26.4.4
Low	GHSA-8hc5-rmgf-qx6p	keycloak-ldap-federation@17.0.1	23.0.1
Low	GHSA-8hc5-rmgf-qx6p	keycloak-services@17.0.1	23.0.1
Low	RHSA-2026:36734	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.6
Low	GHSA-6vgw-5pg2-w6jp	pip@9.0.3	26.0
Low	GHSA-mwm4-5qwr-g9pf	keycloak-services@17.0.1	18.0.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.10.0latest	1 year ago	17.0.1-legacy	717175287	8,088

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codecentric/keycloak.svg)](https://charts.stackradar.io/charts/codecentric/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.