keycloak Helm chart
wiremindVerified publisherScored 14 Sept 2026
Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.
Latest 25.3.1 7 months agodeploys tag 17.6.0-debian-12-r4 0Artifact Hub
keycloak 25.3.1 deploys 2 container images: bitnamilegacy/postgresql and ghcr.io/wiremind/bitnami/keycloak. Across them, 707 findings — 1 critical, 2 high. The highest contribution is DEBIAN-CVE-2025-6965 in sqlite3 3.40.1-2+deb12u1, fixed in 3.40.1-2+deb12u2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnamilegacy/ | 17.6.0-debian-12-r4 | 1151218 | 3,056 |
| ghcr.io/ | 26.5.0-debian-12-r3 | 0160375 | 4,568 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-8058 | glibc | 2.36-9+deb12u13 |
| Low | GHSA-p3v8-fm5p-v84h | keycloak-services | no fix listed |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2026-56392 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-54370 | acl | no fix listed |
| Low | DEBIAN-CVE-2005-2541 | tar | no fix listed |
| Low | DEBIAN-CVE-2025-10966 | curl | no fix listed |
| Low | GHSA-g8vr-x4qh-25qg | keycloak-services | 26.6.3 |
| Low | DEBIAN-CVE-2026-15534 | perl | no fix listed |
| Low | BIT-gdal-2026-8212 | gdal | 3.13.0 |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | GHSA-933f-rg6j-f46p | keycloak-services | 26.6.2 |
| Low | BIT-keycloak-2026-16089 | keycloak | 26.7.3 |
| Low | DEBIAN-CVE-2025-14017 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-10911 | libxslt | no fix listed |
| Low | DEBIAN-CVE-2026-86144 | libxml2 | no fix listed |
| Low | GHSA-q6h7-xxp7-7429 | keycloak-services | no fix listed |
| Low | DEBIAN-CVE-2024-10041 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | BIT-postgresql-2026-14663 | postgresql | 14.24.0 |
| Low | DEBIAN-CVE-2025-9714 | libxml2 | 2.9.14+dfsg-1.3~deb12u5 |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | GHSA-q35r-vvhv-vx5h | keycloak-server-spi-private | 26.5.6 |
| Low | GHSA-q35r-vvhv-vx5h | keycloak-services | 26.5.6 |
| Low | GHSA-q35r-vvhv-vx5h | keycloak-model-jpa | 26.5.6 |
| Low | DEBIAN-CVE-2026-0989 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | BIT-postgresql-2026-6472 | postgresql | 14.23.0 |
| Low | DEBIAN-CVE-2026-13595 | util-linux | no fix listed |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | BIT-jre-2026-21925 | jre | 1.8.0 |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | DEBIAN-CVE-2026-22795 | openssl | 3.0.18-1~deb12u2 |
| Low | GHSA-wcvj-vpvw-9rr5 | keycloak-services | no fix listed |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2026-42770 | openssl | 3.0.20-1~deb12u2 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | BIT-postgresql-2026-2003 | postgresql | 14.21.0 |
| Low | GHSA-wh89-7897-x99h | netty-codec-haproxy | 4.1.136.Final |
| Low | DSA-5990-1 | libxml2 | 2.9.14+dfsg-1.3~deb12u4 |
| Low | DEBIAN-CVE-2025-8732 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | BIT-keycloak-2026-16105 | keycloak | 26.7.3 |
| Low | BIT-keycloak-2026-18570 | keycloak | 26.7.3 |
| Low | DEBIAN-CVE-2025-15649 | perl | no fix listed |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | BIT-jre-2026-23865 | jre | 11.0.31 |
| Low | DEBIAN-CVE-2010-4756 | glibc | no fix listed |
| Low | BIT-keycloak-2026-18218 | keycloak | 26.7.3 |
| Low | BIT-keycloak-2026-15945 | keycloak | 26.7.2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 25.3.1latest | 7 months ago | 17.6.0-debian-12-r4 | 12111593 | 7,624 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.