keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codecentric

Scored 20 Oct 2026

Open Source Identity and Access Management For Modern Applications and Services

Latest 18.10.0 1 year agoapp version 17.0.1-legacy 48Artifact Hub

keycloak 18.10.0 deploys 3 container images: bitnami/postgresql, library/busybox and quay.io/keycloak/keycloak. Across the 2 measured, 485 findings — 7 critical, 17 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

8,073717175286

485 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	11.14.0-debian-10-r28	—	unmeasured
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	717175286	8,073

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

485 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-h4h5-3hr4-j3g2	protobuf-java@3.19.2	3.19.6
Low	GHSA-jmj6-p2j9-68cp	wildfly-elytron@1.18.3.Final	1.20.3.Final
Low	RHSA-2023:5742	java-11-openjdk@1:11.0.14.1.1-2.el8_5	1:11.0.21.0.9-2.el8
Low	GHSA-69fp-7c8p-crjr	keycloak-services@17.0.1	24.0.5
Low	RHSA-2024:3268	krb5@1.18.2-14.el8	0:1.18.2-27.el8_10
Low	RHSA-2026:2389	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10
Low	RHSA-2026:42090	glib2@2.56.4-156.el8	0:2.56.4-170.el8_10
Low	RHSA-2024:9502	expat@2.2.5-4.el8_5.3	0:2.2.5-16.el8_10
Low	GHSA-cjm2-j6cm-6p6m	keycloak-services@17.0.1	26.5.7
Low	RHSA-2026:15953	glib2@2.56.4-156.el8	0:2.56.4-169.el8_10
Low	RHBA-2024:6680	nss@3.67.0-7.el8_5	0:3.101.0-7.el8_8
Low	GHSA-65r4-943x-97jj	jsoup@1.14.2	1.23.2
Low	GHSA-gc7q-jgjv-vjr2	keycloak-services@17.0.1	22.0.12
Low	RHSA-2026:81613	pcre2@10.32-2.el8	0:10.32-4.el8_10
Low	GHSA-9wmf-xf3h-r8pr	jberet-core@1.3.10.Final	2.2.1.Final
Low	GHSA-qr6x-62gq-4ccp	wildfly-server@18.0.4.Final	27.0.1.Final
Low	RHSA-2025:12450	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.2
Low	RHSA-2025:14135	libarchive@3.3.3-3.el8_5	0:3.3.3-6.el8_10
Low	GHSA-hj93-h7pg-fh6v	keycloak-services@17.0.1	26.5.7
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	RHSA-2025:23383	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.9
Low	GHSA-7hhh-6rmp-j9qf	jackson-core@2.11.4	2.18.11
Low	RHSA-2024:4265	cups@1:2.2.6-40.el8	1:2.2.6-60.el8_10
Low	RHSA-2026:2128	python3@3.6.8-41.el8	0:3.6.8-73.el8_10
Low	GHSA-c9h6-v78w-52wj	keycloak-services@17.0.1	22.0.10
Low	RHSA-2025:8686	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.22
Low	GHSA-qv9r-c865-cp47	log4j-api@2.17.1	2.25.5
Low	GHSA-w97f-w3hq-36g2	keycloak-core@17.0.1	24.0.0
Low	RHSA-2026:22721	expat@2.2.5-4.el8_5.3	0:2.5.0-2.el8_10
Low	RHSA-2022:2031	libssh@0.9.4-3.el8	0:0.9.6-3.el8
Low	RHSA-2026:62218	libssh@0.9.4-3.el8	0:0.9.6-17.el8_10
Low	RHSA-2025:4051	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_10.3
Low	GHSA-c7xw-p58w-h6fj	keycloak-core@17.0.1	22.0.1
Low	GHSA-32h4-44jj-c5vx	keycloak-services@17.0.1	26.6.4
Low	GHSA-cxp5-3px4-pw24	jackson-databind@2.12.1	2.18.11
Low	GHSA-wv8q-qhhj-9h54	jackson-databind@2.12.1	2.18.11
Low	GHSA-3qh5-qqj2-c78f	keycloak-services@17.0.1	21.1.2
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.69	1.78
Low	GHSA-rr5q-3xwr-f323	keycloak-server-spi-private@17.0.1	26.6.3
Low	GHSA-rr5q-3xwr-f323	keycloak-services@17.0.1	26.6.3
Low	GHSA-hq3p-w4xv-x7vp	keycloak-services@17.0.1	26.6.2
Low	GHSA-m6q9-p373-g5q8	keycloak-services@17.0.1	22.0.10
Low	GHSA-xvr9-35cr-46v9	mariadb-java-client@2.5.4	2.7.14
Low	GHSA-w4p5-rfh6-cwrv	keycloak-services@17.0.1	26.6.2
Low	RHSA-2022:5056	cups@1:2.2.6-40.el8	1:2.2.6-45.el8_6.2
Low	GHSA-mrv8-pqfj-7gp5	keycloak-services@17.0.1	22.0.10
Low	RHSA-2024:3203	systemd@239-51.el8_5.5	0:239-82.el8
Low	RHSA-2026:16799	krb5@1.18.2-14.el8	0:1.18.2-34.el8_10
Low	GHSA-w354-2f3c-qvg9	keycloak-services@17.0.1	no fix listed
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.69	1.84

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.10.0latest	1 year ago	17.0.1-legacy	717175286	8,073

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codecentric/keycloak.svg)](https://charts.stackradar.io/charts/codecentric/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.