StackRadar

bitnamilegacy/keycloak:24.0.4 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak

bitnamilegacy/keycloak:24.0.4 resolved to cc599cbd15ff, scanned 14 Sept 2026: 658 findings, 2 critical; deployed by 1 chart, among them incore.

Radar Score

7,1002586565

658 findings on digest cc599cbd15ff · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
24.0.4resolves tocc599cbd15ff1 chart8 days ago25865657,100

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

658 distinct on this digest

Findings for digest cc599cbd15ff as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-4438glibc@2.36-9+deb12u72.36-9+deb12u14
LowGHSA-mfg7-5gfp-c4w3netty-codec-dns@4.1.108.Final4.1.136.Final
LowGHSA-g4gc-rh26-m3p5keycloak-core@24.0.424.0.7
LowGHSA-fqjh-8322-vgrvkeycloak-services@24.0.4no fix listed
LowDEBIAN-CVE-2024-28835gnutls28@3.7.9-2+deb12u23.7.9-2+deb12u3
LowDEBIAN-CVE-2023-31438systemd@252.22-1~deb12u1no fix listed
LowBIT-keycloak-2026-16093Keycloak@24.0.4-126.7.3
LowBIT-keycloak-2026-16093keycloak@24.0.4-126.7.3
LowBIT-keycloak-2026-16108Keycloak@24.0.4-126.7.3
LowBIT-keycloak-2026-16108keycloak@24.0.4-126.7.3
LowGHSA-fm6w-rrp3-2x4wkeycloak-services@24.0.426.2.13
LowBIT-keycloak-2026-37978Keycloak@24.0.4-126.4.12
LowBIT-keycloak-2026-37978keycloak@24.0.4-126.4.12
LowGHSA-rrv7-3mqf-hxfrkeycloak-services@24.0.426.6.2
LowGO-2026-4601stdlib@go1.21.101.25.8
LowBIT-java-2024-21012Java@17.0.11-12-011.0.23
LowBIT-java-2024-21012java@17.0.11-12-011.0.23
LowGHSA-gcjf-9mgh-3p7gnetty-codec-http@4.1.108.Final4.1.136.Final
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.1.108.Final4.1.133.Final
LowGHSA-g9jj-cgmh-9f38mariadb-java-client@3.3.33.3.5
LowDEBIAN-CVE-2026-78410util-linux@2.38.1-5+deb12u1no fix listed
LowBIT-java-2026-22021java@17.0.11-12-01.8.0
LowBIT-java-2026-22021Java@17.0.11-12-01.8.0
LowBIT-java-2026-47021Java@17.0.11-12-01.8.0
LowBIT-java-2026-47021java@17.0.11-12-01.8.0
LowGHSA-563q-j3cm-6jxmnetty-codec-http2@4.1.108.Final4.1.135.Final
LowDEBIAN-CVE-2026-89161pcre2@10.42-110.42-1+deb12u1
LowGO-2026-5026stdlib@go1.21.101.25.13
LowGHSA-83c4-ffjp-mxp9keycloak-services@24.0.4no fix listed
LowBIT-java-2025-30754Java@17.0.11-12-01.8.0
LowBIT-java-2025-30754java@17.0.11-12-01.8.0
LowGHSA-895x-rfqp-jh5ckeycloak-services@24.0.426.2.3
LowDEBIAN-CVE-2025-14104util-linux@2.38.1-5+deb12u1no fix listed
LowGHSA-5x3r-wrvg-rp6qnetty-codec-http2@4.1.108.Final4.1.135.Final
LowBIT-keycloak-2024-7318Keycloak@24.0.4-124.0.7
LowBIT-keycloak-2024-7318keycloak@24.0.4-124.0.7
LowGHSA-xmmm-jw76-q7vgkeycloak-core@24.0.424.0.7
LowDEBIAN-CVE-2026-42014gnutls28@3.7.9-2+deb12u23.7.9-2+deb12u7
LowBIT-java-2026-46917java@17.0.11-12-011.0.32
LowBIT-java-2026-46917Java@17.0.11-12-011.0.32
LowBIT-java-2026-47027Java@17.0.11-12-01.8.0
LowBIT-java-2026-47027java@17.0.11-12-01.8.0
LowGO-2025-3420stdlib@go1.21.101.22.11
LowGO-2026-4342stdlib@go1.21.101.24.12
LowDEBIAN-CVE-2026-4105systemd@252.22-1~deb12u1252.39-1~deb12u2
LowGO-2025-3751stdlib@go1.21.101.23.10
LowDEBIAN-CVE-2026-78409util-linux@2.38.1-5+deb12u1no fix listed
LowDEBIAN-CVE-2024-13176openssl@3.0.11-1~deb12u23.0.16-1~deb12u1
LowDEBIAN-CVE-2023-4641shadow@1:4.13+dfsg1-1+b11:4.13+dfsg1-1+deb12u1
LowBIT-java-2026-22013java@17.0.11-12-01.8.0

Used by

1 chart
ChartVersionTagContainers
incorencsaVerified publisher1.38.024.0.42

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.