keycloak 0.3.0 Helm chart

Name: keycloak Helm chart 0.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sb-helm-charts

Scored 14 Sept 2026

A Helm chart for Keycloak - Open Source Identity and Access Management

Version 0.3.0 10 months agoapp version 26.0.6 0Artifact Hub

keycloak 0.3.0 deploys 2 container images: library/postgres and quay.io/keycloak/keycloak. Across them, 253 findings — 1 critical, 1 high — 1 on CISA KEV. The highest contribution is RHSA-2025:11992 in sqlite 3.34.1-7.el9_3, fixed in 0:3.34.1-8.el9_6.

Radar Score

2,5901125226

253 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	16-alpine	00456	493
quay.io/keycloak/keycloak	26.0.6	1121170	2,097

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

253 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2025:11992	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6
High	RHSA-2025:1346KEV	gcc@11.5.0-2.el9	0:11.5.0-5.el9_5
Medium	GHSA-4gv3-mc9p-5wqc	keycloak-services@26.0.6	26.4.15
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.7.4	42.7.11
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.111.Final	4.1.118.Final
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.111.Final	4.1.132.Final
Medium	RHSA-2025:10873	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.8.0.9-1.el9
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.14.0	3.18.0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.111.Final	4.1.135.Final
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.17.2	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.17.2	2.18.8
Medium	RHSA-2026:9689	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.11.0.10-2.el9
Medium	GHSA-phg3-gv66-q38x	quarkus-rest@3.15.1	3.15.3.1
Medium	GHSA-phg3-gv66-q38x	quarkus-rest-deployment@3.15.1	3.15.3.1
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.111.Final	4.1.124.Final
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.111.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.111.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.111.Final	4.1.133.Final
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.111.Final	4.1.136.Final
Medium	GHSA-q6cq-mhr2-jmr5	netty-codec-haproxy@4.1.111.Final	4.1.136.Final
Medium	RHSA-2026:0928	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.10.0.7-1.el9
Medium	GHSA-m494-w24q-6f7w	mssql-jdbc@12.8.1	12.8.2.jre11
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.111.Final	4.1.135.Final
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.13.5	no fix listed
Low	RHSA-2026:2786	glibc@2.34-125.el9_5.1	0:2.34-231.el9_7.10
Low	RHSA-2025:3855	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.7.0.6-1.el9
Low	GHSA-9342-92gg-6v29	smtp@2.0.3	2.0.4
Low	GHSA-cxrx-q234-m22m	quarkus-http-core@5.3.2	5.3.4
Low	GHSA-p5mv-gj8j-xqgf	keycloak-saml-core@26.0.6	26.6.2
Low	GHSA-37gf-gmxv-74wv	keycloak-services@26.0.6	26.4.9
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.111.Final	4.1.133.Final
Low	GHSA-qcxp-gm7m-4j5v	quarkus-vertx-http@3.15.1	3.20.6.2
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.111.Final	4.1.132.Final
Low	GHSA-hq9p-pm7w-8p54	postgresql@42.7.4	42.7.7
Low	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@3.15.1	3.20.6.1
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.111.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.111.Final	4.1.135.Final
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@26.0.6	26.6.2
Low	GHSA-w3g8-r9gw-qrh8	keycloak-quarkus-server@26.0.6	26.0.8
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.111.Final	4.1.135.Final
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.78.1	1.80.2
Low	GHSA-hcvw-475w-8g7p	keycloak-services@26.0.6	26.2.13
Low	GHSA-hw58-3793-42gg	keycloak-services@26.0.6	26.2.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.0latest	10 months ago	26.0.6	1125226	2,590

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sb-helm-charts/keycloak.svg)](https://charts.stackradar.io/charts/sb-helm-charts/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.