quay.io/keycloak/keycloak-operator:18.0.0-legacy container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/keycloak/keycloak-operator

quay.io/keycloak/keycloak-operator:18.0.0-legacy resolved to 36ce77526145, scanned 14 Sept 2026: 316 findings, 4 critical, 4 on KEV; deployed by 1 chart, among them keycloak-operator.

Radar Score

4,71441372227

316 findings on digest 36ce77526145 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
18.0.0-legacyresolves to	36ce77526145	1 chart	8 days ago	41372227	4,714

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

72 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 36ce77526145 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	RHSA-2024:0253	sqlite@3.26.0-15.el8	0:3.26.0-19.el8_9
Medium	RHSA-2023:3018	libarchive@3.3.3-3.el8_5	0:3.3.3-5.el8
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
Medium	RHSA-2023:1140	curl@7.61.1-22.el8	0:7.61.1-25.el8_7.3
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8	0:4.13-4.el8_7
Medium	GO-2021-0243	stdlib@go1.13.8	1.15.14
Medium	GO-2022-0273	stdlib@go1.13.8	1.16.8
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd	0.0.0-20220412211240-33da011f77ad
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1
Medium	RHSA-2025:11327	glib2@2.56.4-156.el8	0:2.56.4-166.el8_10
Medium	RHBA-2024:5736	ca-certificates@2021.2.50-80.0.el8_4	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.6.0	1.8.3
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
Medium	RHSA-2026:26354	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.5
Medium	RHSA-2023:4523	curl@7.61.1-22.el8	0:7.61.1-30.el8_8.3
Medium	GO-2022-1144	stdlib@go1.13.8	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
Medium	RHSA-2025:17415	gnutls@3.6.16-4.el8	0:3.6.16-8.el8_10.4
Medium	RHSA-2026:38503	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6

Used by

1 chart

Chart	Version	Tag	Containers
keycloak-operatorwiremindVerified publisher	0.0.14	18.0.0-legacy	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.