bitnamilegacy/keycloak:20.0.5 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak

bitnamilegacy/keycloak:20.0.5 resolved to cb04e49e6eb1, scanned 14 Sept 2026: 515 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them clowder2.

Radar Score

5,4651357454

515 findings on digest cb04e49e6eb1 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
20.0.5resolves to	cb04e49e6eb1	1 chart	8 days ago	1357454	5,465

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

454 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest cb04e49e6eb1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	BIT-java-2025-50106	java@17.0.6-10-4	1.8.0
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.2.3	2.2.6
Low	BIT-java-2025-21587	java@17.0.6-10-4	1.8.0
Low	BIT-java-2025-50059	java@17.0.6-10-4	11.0.28
Low	BIT-java-2024-20932	java@17.0.6-10-4	17.0.10
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.5	1.6.8
Low	GHSA-cxrx-q234-m22m	quarkus-http-core@4.1.9	5.3.4
Low	BIT-java-2023-21967	java@17.0.6-10-4	1.8.0
Low	GHSA-p5mv-gj8j-xqgf	keycloak-saml-core@20.0.5	26.6.2
Low	GHSA-37gf-gmxv-74wv	keycloak-services@20.0.5	26.4.9
Low	GHSA-5rxp-2rhr-qwqv	keycloak-services@20.0.5	22.0.12
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.86.Final	4.1.133.Final
Low	GHSA-v4mm-q8fv-r2w5	wildfly-elytron-realm-token@1.20.1.Final	no fix listed
Low	BIT-java-2026-22016	java@17.0.6-10-4	1.8.0
Low	BIT-java-2023-21954	java@17.0.6-10-4	1.8.0
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	GHSA-qcxp-gm7m-4j5v	quarkus-vertx-http@2.13.7.Final	3.20.6.2
Low	BIT-java-2025-53066	java@17.0.6-10-4	1.8.0
Low	GHSA-7g24-qg88-p43q	jose4j@0.7.11	0.9.3
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.86.Final	4.1.132.Final
Low	BIT-java-2026-34282	java@17.0.6-10-4	1.8.0
Low	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@2.13.7.Final	3.20.6.1
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.86.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.86.Final	4.1.135.Final
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@20.0.5	26.6.2
Low	GHSA-w3g8-r9gw-qrh8	keycloak-quarkus-server@20.0.5	26.0.8
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.86.Final	4.1.135.Final
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.4.2	2.14.0
Low	GHSA-w33c-445m-f8w7	okio-jvm@3.0.0	3.4.0
Low	GHSA-hcvw-475w-8g7p	keycloak-services@20.0.5	26.2.13
Low	GHSA-488m-w9fp-5mm2	protostream@4.4.3.Final	4.6.2.Final
Low	GO-2023-2102	stdlib@go1.18.2	1.20.10
Low	GHSA-3fhx-3vvg-2j84	quarkus-core@2.13.7.Final	2.16.8.Final
Low	GHSA-hw58-3793-42gg	keycloak-services@20.0.5	26.2.2
Low	DSA-5439-1	bind9@1:9.16.37-1~deb11u1	1:9.16.42-1~deb11u1
Low	GHSA-6qvw-249j-h44c	jose4j@0.7.11	0.9.4
Low	GHSA-hf67-5vvq-fm3r	keycloak-services@20.0.5	26.6.2
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.86.Final	4.1.137.Final
Low	GHSA-jmj6-p2j9-68cp	wildfly-elytron@1.20.1.Final	1.20.3.Final
Low	GHSA-69fp-7c8p-crjr	keycloak-services@20.0.5	24.0.5
Low	GHSA-x4p7-7chp-64hq	keycloak-server-spi-private@20.0.5	26.5.5
Low	GHSA-x4p7-7chp-64hq	keycloak-services@20.0.5	26.5.5
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-h4wv-g838-66g3	keycloak-services@20.0.5	26.5.7
Low	GHSA-gc7q-jgjv-vjr2	keycloak-services@20.0.5	22.0.12
Low	BIT-java-2023-22081	java@17.0.6-10-4	1.8.0
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.86.Final	4.1.135.Final
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6

Used by

1 chart

Chart	Version	Tag	Containers
clowder2ncsaVerified publisher	1.9.7	20.0.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.