bitnamilegacy/keycloak:20.0.5 container image

Docker Hub

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak

bitnamilegacy/keycloak:20.0.5 resolved to cb04e49e6eb1, scanned 15 Sept 2026: 515 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them clowder2.

Radar Score

5,4661359452

515 findings on digest cb04e49e6eb1 · scanned 15 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
20.0.5resolves to	cb04e49e6eb1	1 chart	9 days ago	1359452	5,466

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

452 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest cb04e49e6eb1 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2025-4175	stdlib@go1.18.2	1.24.11
Low	GHSA-fjf4-6f34-w64q	keycloak-services@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-services@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-server-spi-private@20.0.5	no fix listed
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.11	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@20.0.5	no fix listed
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@20.0.5	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@20.0.5	26.4.12
Low	BIT-java-2026-47059	java@17.0.6-10-4	1.8.0
Low	GO-2026-4403	stdlib@go1.18.2	1.23.9
Low	GO-2026-4970	stdlib@go1.18.2	1.25.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.0	1.1.14
Low	GHSA-5545-r4hg-rj4m	keycloak-quarkus-server@20.0.5	26.0.6
Low	BIT-java-2026-22018	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-60589	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-47010	java@17.0.6-10-4	1.8.0
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@20.0.5	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@20.0.5	22.0.12
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@20.0.5	22.0.10
Low	GHSA-63v5-26vq-m4vm	keycloak-services@20.0.5	no fix listed
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@13.0.10.Final	14.0.25.Final
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u9
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@20.0.5	26.4.13
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@20.0.5	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.86.Final	4.1.135.Final
Low	GHSA-g78x-7vwx-9f58	keycloak-services@20.0.5	26.4.9
Low	GHSA-j75r-vf64-6rrh	resteasy-reactive-common@2.13.7.Final	3.0.0.Alpha4
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd	0.44.0
Low	GHSA-6q37-7866-h27j	keycloak-services@20.0.5	26.5.0
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@20.0.5	26.7.0
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.0	1.3.6
Low	GHSA-594w-2fwp-jwrc	keycloak-services@20.0.5	no fix listed
Low	GHSA-xh32-c9wx-phrp	keycloak-services@20.0.5	no fix listed
Low	DLA-3972-1	tzdata@2021a-1+deb11u9	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u9	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u9	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u9	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	BIT-keycloak-2025-12150	keycloak@20.0.5-6	26.4.4
Low	GHSA-7g5x-9c4v-4w5r	keycloak-services@20.0.5	26.4.4
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.86.Final	4.1.125.Final
Low	GHSA-8hc5-rmgf-qx6p	keycloak-ldap-federation@20.0.5	23.0.1
Low	GHSA-8hc5-rmgf-qx6p	keycloak-services@20.0.5	23.0.1
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.1.0	1.1.5

Used by

1 chart

Chart	Version	Tag	Containers
clowder2ncsaVerified publisher	1.9.7	20.0.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.