quay.io/keycloak/keycloak-operator:20.0.2 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/keycloak/keycloak-operator

quay.io/keycloak/keycloak-operator:20.0.2 resolved to b1710745fa64, scanned 14 Sept 2026: 281 findings, 6 critical, 4 on KEV; deployed by 1 chart, among them keycloak-operator.

Radar Score

4,65261186178

281 findings on digest b1710745fa64 · scanned 14 Sept 2026

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
20.0.2resolves to	b1710745fa64	1 chart	8 days ago	61186178	4,652

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

High findings

11 distinct on this digest

High: findings whose contribution to the Radar Score is 40–69. Show every band

Findings for digest b1710745fa64 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	RHSA-2025:0083	cups@1:2.2.6-50.el8	1:2.2.6-62.el8_10
High	RHSA-2023:1405	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-9.el8_7
High	RHSA-2025:1301KEV	gcc@8.5.0-15.el8	0:8.5.0-23.el8_10
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2024:0628	libssh@0.9.6-3.el8	0:0.9.6-13.el8_9
High	RHSA-2024:5654	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2
High	RHSA-2024:4252	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-6.el8_10.1
High	RHSA-2024:8860	krb5@1.18.2-22.el8_7	0:1.18.2-30.el8_10
High	RHSA-2023:0173	libxml2@2.9.7-15.el8	0:2.9.7-15.el8_7.1
High	RHSA-2023:3591	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.1
High	RHSA-2025:21776	expat@2.2.5-10.el8	0:2.5.0-1.el8_10

Used by

1 chart

Chart	Version	Tag	Containers
keycloak-operatorkeycloak-operatorVerified publisher	0.0.4	20.0.2	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.