keycloak Helm chart

Name: keycloak Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wiremind

Scored 14 Sept 2026

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

Latest 25.3.1 7 months agodeploys tag 17.6.0-debian-12-r4 0Artifact Hub

keycloak 25.3.1 deploys 2 container images: bitnamilegacy/postgresql and ghcr.io/wiremind/bitnami/keycloak. Across them, 707 findings — 1 critical, 2 high. The highest contribution is DEBIAN-CVE-2025-6965 in sqlite3 3.40.1-2+deb12u1, fixed in 3.40.1-2+deb12u2.

Radar Score

7,62412111593

707 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/postgresql	17.6.0-debian-12-r4	1151218	3,056
ghcr.io/wiremind/bitnami/keycloak×2	26.5.0-debian-12-r3	0160375	4,568

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

78 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.19.2	2.21.4
Medium	BIT-postgresql-2026-14669	postgresql@17.6.0-2	14.24.0
Medium	DEBIAN-CVE-2026-34182	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2026-31790	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-34180	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2
Medium	DEBIAN-CVE-2024-2379	curl@7.88.1-10+deb12u14	no fix listed
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.128.Final	4.1.133.Final
Medium	DEBIAN-CVE-2026-8924	curl@7.88.1-10+deb12u14	no fix listed
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.128.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.128.Final	4.1.133.Final
Medium	DEBIAN-CVE-2026-8376	perl@5.36.0-7+deb12u3	no fix listed
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.128.Final	4.1.136.Final
Medium	GHSA-q6cq-mhr2-jmr5	netty-codec-haproxy@4.1.128.Final	4.1.136.Final
Medium	DEBIAN-CVE-2026-5260	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Medium	DEBIAN-CVE-2026-8927	curl@7.88.1-10+deb12u14	no fix listed
Medium	DEBIAN-CVE-2026-28388	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2
Medium	BIT-jre-2026-21945	jre@21.0.9-15-0	1.8.0
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2
Medium	GHSA-m494-w24q-6f7w	mssql-jdbc@13.2.1	13.2.1.jre11
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.128.Final	4.1.135.Final
Medium	BIT-postgresql-2026-16239	postgresql@17.6.0-2	14.24.0
Medium	DEBIAN-CVE-2026-28387	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1+deb12u2	no fix listed
Medium	DEBIAN-CVE-2026-28389	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-28390	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u13	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
25.3.1latest	7 months ago	17.6.0-debian-12-r4	12111593	7,624

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wiremind/keycloak.svg)](https://charts.stackradar.io/charts/wiremind/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.