StackRadar

keycloakx 2.2.0 Helm chart

zaks

Scored 14 Sept 2026

Keycloak.X - Open Source Identity and Access Management for Modern Applications and Services

Version 2.2.0 3 years agoapp version 20.0.3 0Artifact Hub

keycloakx 2.2.0 deploys 1 container image: quay.io/keycloak/keycloak. Across them, 421 findings6 critical, 11 high 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-211.el8, fixed in 0:2.28-236.el8_9.13.

Radar Score

6,01661198306

421 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
quay.io/keycloak/keycloak20.0.3611983066,016

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

306 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2026:15953glib2@2.56.4-159.el80:2.56.4-169.el8_10
LowGHSA-x4p7-7chp-64hqkeycloak-server-spi-private@20.0.326.5.5
LowGHSA-x4p7-7chp-64hqkeycloak-services@20.0.326.5.5
LowRHSA-2024:0105nss@3.79.0-10.el8_60:3.90.0-4.el8_9
LowRHSA-2023:4529libxml2@2.9.7-15.el80:2.9.7-16.el8_8.1
LowRHBA-2024:6680nss@3.79.0-10.el8_60:3.101.0-7.el8_8
LowGHSA-fx2c-96vj-985vnetty-codec-haproxy@4.1.82.Final4.1.86.Final
LowGHSA-h4wv-g838-66g3keycloak-services@20.0.326.5.7
LowGHSA-gc7q-jgjv-vjr2keycloak-services@20.0.322.0.12
LowRHSA-2024:9502expat@2.2.5-10.el8_7.10:2.2.5-16.el8_10
LowRHSA-2026:2389brotli@1.0.6-3.el80:1.0.6-4.el8_10
LowRHSA-2023:5742java-11-openjdk@1:11.0.17.0.8-2.el8_61:11.0.21.0.9-2.el8
LowGHSA-5pvg-856g-cp85netty-resolver-dns@4.1.82.Final4.1.135.Final
LowRHSA-2025:23383curl@7.61.1-25.el8_7.10:7.61.1-34.el8_10.9
LowRHSA-2024:0119libxml2@2.9.7-15.el80:2.9.7-18.el8_9
LowRHSA-2024:4265cups@1:2.2.6-50.el81:2.2.6-60.el8_10
LowGHSA-5jpm-x58v-624vnetty-codec-http@4.1.82.Final4.1.108.Final
LowGHSA-c9h6-v78w-52wjkeycloak-services@20.0.322.0.10
LowRHSA-2025:14135libarchive@3.3.3-4.el80:3.3.3-6.el8_10
LowGHSA-w97f-w3hq-36g2keycloak-core@20.0.324.0.0
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.82.Final4.1.125.Final
LowRHSA-2026:2128python3@3.6.8-48.el8_70:3.6.8-73.el8_10
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.82.Final4.1.133.Final
LowRHSA-2026:22721expat@2.2.5-10.el8_7.10:2.5.0-2.el8_10
LowGHSA-c653-97m9-rcg9netty-handler@4.1.82.Final4.1.135.Final
LowRHSA-2025:4051gnutls@3.6.16-5.el8_60:3.6.16-8.el8_10.3
LowGHSA-c7xw-p58w-h6fjkeycloak-core@20.0.322.0.1
LowRHSA-2025:8686glibc@2.28-211.el80:2.28-251.el8_10.22
LowGHSA-v7gv-xpgf-6395keycloak-quarkus-server@20.0.324.0.9
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.82.Final4.1.136.Final
LowGHSA-3qh5-qqj2-c78fkeycloak-services@20.0.321.1.2
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.82.Final4.1.136.Final
LowGHSA-v435-xc8x-wvr9bcprov-jdk15on@1.701.78
LowGHSA-f2hx-5fx3-hmcvkeycloak-services@20.0.326.5.7
LowGHSA-m6q9-p373-g5q8keycloak-services@20.0.322.0.10
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.82.Final4.1.136.Final
LowGHSA-mrv8-pqfj-7gp5keycloak-services@20.0.322.0.10
LowGHSA-m297-3jv9-m927keycloak-services@20.0.326.5.5
LowRHSA-2024:3203systemd@239-68.el8_7.20:239-82.el8
LowGHSA-558v-64gr-wgg4netty-codec@4.1.82.Final4.1.136.Final
LowGHSA-w354-2f3c-qvg9keycloak-services@20.0.3no fix listed
LowGHSA-hj93-h7pg-fh6vkeycloak-services@20.0.326.5.7
LowGHSA-cjm2-j6cm-6p6mkeycloak-services@20.0.326.5.7
LowRHSA-2025:12450libxml2@2.9.7-15.el80:2.9.7-21.el8_10.2
LowGHSA-46c8-635v-68r2keycloak-services@20.0.322.0.10
LowGHSA-9ph3-v2vh-3qx7vertx-core@4.3.44.4.8
LowRHSA-2025:4049libtasn1@4.13-4.el8_70:4.13-5.el8_10
LowRHSA-2026:57462curl@7.61.1-25.el8_7.10:7.61.1-34.el8_10.13
LowRHSA-2024:10779python3@3.6.8-48.el8_70:3.6.8-69.el8_10
LowGHSA-wf93-45jw-7689pip@9.0.326.1.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.2.0latest3 years ago20.0.3611983066,016

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/zaks/keycloakx.svg)](https://charts.stackradar.io/charts/zaks/keycloakx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.