bitnamilegacy/keycloak:20.0.5 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak

bitnamilegacy/keycloak:20.0.5 resolved to cb04e49e6eb1, scanned 14 Sept 2026: 515 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them clowder2.

Radar Score

5,4651357454

515 findings on digest cb04e49e6eb1 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
20.0.5resolves to	cb04e49e6eb1	1 chart	8 days ago	1357454	5,465

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

515 distinct on this digest

Findings for digest cb04e49e6eb1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	BIT-java-2024-20945	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-46917	java@17.0.6-10-4	11.0.32
Low	BIT-java-2026-47027	java@17.0.6-10-4	1.8.0
Low	GO-2025-3420	stdlib@go1.18.2	1.22.11
Low	GO-2026-4342	stdlib@go1.18.2	1.24.12
Low	GO-2024-2598	stdlib@go1.18.2	1.21.8
Low	GO-2025-3751	stdlib@go1.18.2	1.23.10
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u9
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.86.Final	4.1.100.Final
Low	BIT-java-2026-22013	java@17.0.6-10-4	1.8.0
Low	BIT-keycloak-2026-17048	keycloak@20.0.5-6	26.7.2
Low	GHSA-jgwc-jh89-rpgq	keycloak-quarkus-server@20.0.5	no fix listed
Low	BIT-java-2026-70907	java@17.0.6-10-4	1.8.0
Low	GHSA-7g45-4rm6-3mm3	guava@30.1-jre	32.0.0-android
Low	BIT-java-2024-21210	java@17.0.6-10-4	1.8.0
Low	BIT-keycloak-2026-16072	keycloak@20.0.5-6	26.7.3
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@3.0.8	3.3.5
Low	DLA-4146-1	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u7
Low	GO-2026-4870	stdlib@go1.18.2	1.25.9
Low	GO-2022-0532	stdlib@go1.18.2	1.17.11
Low	GO-2025-4009	stdlib@go1.18.2	1.24.8
Low	GO-2026-4947	stdlib@go1.18.2	1.25.9
Low	DLA-4176-1	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3
Low	GHSA-xhpr-465j-7p9q	keycloak-services@20.0.5	26.0.13
Low	GHSA-cq42-vhv7-xr7p	keycloak-services@20.0.5	24.0.0
Low	BIT-keycloak-2026-14613	keycloak@20.0.5-6	26.7.2
Low	BIT-keycloak-2026-16106	keycloak@20.0.5-6	26.7.3
Low	GO-2025-4006	stdlib@go1.18.2	1.24.8
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	BIT-java-2024-21094	java@17.0.6-10-4	1.8.0
Low	GO-2026-5037	stdlib@go1.18.2	1.25.11
Low	GO-2026-4971	stdlib@go1.18.2	1.25.10
Low	GHSA-rx66-hj7g-28h7	keycloak-services@20.0.5	26.5.7
Low	GHSA-hm32-hfmw-rhvg	keycloak-services@20.0.5	no fix listed
Low	GO-2026-5972	stdlib@go1.18.2	1.25.13
Low	GO-2026-6088	stdlib@go1.18.2	1.25.13
Low	GO-2026-6089	stdlib@go1.18.2	1.25.13
Low	GO-2026-6090	stdlib@go1.18.2	1.25.13
Low	BIT-keycloak-2026-0871	keycloak@20.0.5-6	26.4.9
Low	GHSA-v4jw-m6rm-399h	keycloak-server-spi-private@20.0.5	26.5.2
Low	BIT-keycloak-2026-18201	keycloak@20.0.5-6	26.7.3
Low	GO-2026-5038	stdlib@go1.18.2	1.25.11
Low	GHSA-93ww-43rr-79v3	keycloak-core@20.0.5	26.0.6
Low	DLA-4181-1	glibc@2.31-13+deb11u5	2.31-13+deb11u13
Low	GHSA-3g76-f9xq-8vp6	vertx-core@4.3.4	no fix listed
Low	GHSA-5mg8-w23w-74h3	guava@30.1-jre	32.0.0-android
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.86.Final	4.1.135.Final
Low	GHSA-64w3-5q9m-68xf	keycloak-services@20.0.5	26.2.11
Low	GO-2025-4012	stdlib@go1.18.2	1.24.8
Low	GO-2025-3956	stdlib@go1.18.2	1.23.12

Used by

1 chart

Chart	Version	Tag	Containers
clowder2ncsaVerified publisher	1.9.7	20.0.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.