bitnamilegacy/keycloak:20.0.5 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak

bitnamilegacy/keycloak:20.0.5 resolved to cb04e49e6eb1, scanned 14 Sept 2026: 515 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them clowder2.

Radar Score

5,4651357454

515 findings on digest cb04e49e6eb1 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
20.0.5resolves to	cb04e49e6eb1	1 chart	8 days ago	1357454	5,465

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

515 distinct on this digest

Findings for digest cb04e49e6eb1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	BIT-keycloak-2026-18209	keycloak@20.0.5-6	26.7.3
Low	GO-2026-6091	stdlib@go1.18.2	1.25.13
Low	GHSA-vjr8-56p3-fmqq	keycloak-quarkus-server@20.0.5	26.4.4
Low	GO-2025-3750	stdlib@go1.18.2	1.23.10
Low	GO-2026-4864	stdlib@go1.18.2	1.25.9
Low	GO-2025-3447	stdlib@go1.18.2	1.22.12
Low	GO-2026-4865	stdlib@go1.18.2	1.25.9
Low	GO-2026-4869	stdlib@go1.18.2	1.25.9
Low	GHSA-8g9r-9wjw-37j4	keycloak-services@20.0.5	no fix listed
Low	GHSA-5565-3c98-g6jc	wildfly-elytron-http-oidc@1.20.1.Final	2.2.9.Final
Low	GHSA-5565-3c98-g6jc	wildfly-elytron@1.20.1.Final	2.2.9.Final
Low	GO-2026-4340	stdlib@go1.18.2	1.24.12
Low	GHSA-gv3v-2cpp-3pmq	keycloak-quarkus-server@20.0.5	26.5.6
Low	GO-2025-4175	stdlib@go1.18.2	1.24.11
Low	GHSA-fjf4-6f34-w64q	keycloak-services@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-services@20.0.5	no fix listed
Low	GHSA-4q93-v92x-p89f	keycloak-server-spi-private@20.0.5	no fix listed
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.11	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@20.0.5	no fix listed
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@20.0.5	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@20.0.5	26.4.12
Low	BIT-java-2026-47059	java@17.0.6-10-4	1.8.0
Low	GO-2026-4403	stdlib@go1.18.2	1.23.9
Low	GO-2026-4970	stdlib@go1.18.2	1.25.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.0	1.1.14
Low	GHSA-5545-r4hg-rj4m	keycloak-quarkus-server@20.0.5	26.0.6
Low	BIT-java-2026-22018	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-60589	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-47010	java@17.0.6-10-4	1.8.0
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@20.0.5	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@20.0.5	22.0.12
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@20.0.5	22.0.10
Low	GHSA-63v5-26vq-m4vm	keycloak-services@20.0.5	no fix listed
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@13.0.10.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@13.0.10.Final	14.0.25.Final
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u9
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@20.0.5	26.4.13
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@20.0.5	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.86.Final	4.1.135.Final
Low	GHSA-g78x-7vwx-9f58	keycloak-services@20.0.5	26.4.9
Low	GHSA-j75r-vf64-6rrh	resteasy-reactive-common@2.13.7.Final	3.0.0.Alpha4
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd	0.44.0
Low	GHSA-6q37-7866-h27j	keycloak-services@20.0.5	26.5.0
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@20.0.5	26.7.0
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.0	1.3.6
Low	GHSA-594w-2fwp-jwrc	keycloak-services@20.0.5	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
clowder2ncsaVerified publisher	1.9.7	20.0.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.