quay.io/keycloak/keycloak:26.0.6 container image

Quay.io

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/keycloak/keycloak

quay.io/keycloak/keycloak:26.0.6 resolved to a93d22e13b86, scanned 14 Sept 2026: 193 findings, 1 critical, 1 on KEV; deployed by 1 chart, among them keycloak.

Radar Score

2,0971121170

193 findings on digest a93d22e13b86 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
26.0.6resolves to	a93d22e13b86	1 chart	7 days ago	1121170	2,097

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

193 distinct on this digest

Findings for digest a93d22e13b86 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	RHSA-2025:11992	sqlite@3.34.1-7.el9_3	0:3.34.1-8.el9_6
High	RHSA-2025:1346KEV	gcc@11.5.0-2.el9	0:11.5.0-5.el9_5
Medium	GHSA-4gv3-mc9p-5wqc	keycloak-services@26.0.6	26.4.15
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.7.4	42.7.11
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.111.Final	4.1.118.Final
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.111.Final	4.1.132.Final
Medium	RHSA-2025:10873	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.8.0.9-1.el9
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.14.0	3.18.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.111.Final	4.1.135.Final
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.17.2	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.17.2	2.18.8
Medium	RHSA-2026:9689	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.11.0.10-2.el9
Medium	GHSA-phg3-gv66-q38x	quarkus-rest@3.15.1	3.15.3.1
Medium	GHSA-phg3-gv66-q38x	quarkus-rest-deployment@3.15.1	3.15.3.1
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.111.Final	4.1.124.Final
Medium	GHSA-cm33-6792-r9fm	netty-codec-dns@4.1.111.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.111.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.111.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.111.Final	4.1.136.Final
Medium	GHSA-q6cq-mhr2-jmr5	netty-codec-haproxy@4.1.111.Final	4.1.136.Final
Medium	RHSA-2026:0928	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.10.0.7-1.el9
Medium	GHSA-m494-w24q-6f7w	mssql-jdbc@12.8.1	12.8.2.jre11
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.111.Final	4.1.135.Final
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.13.5	no fix listed
Low	RHSA-2026:2786	glibc@2.34-125.el9_5.1	0:2.34-231.el9_7.10
Low	RHSA-2025:3855	java-21-openjdk@1:21.0.5.0.11-2.el9	1:21.0.7.0.6-1.el9
Low	GHSA-9342-92gg-6v29	smtp@2.0.3	2.0.4
Low	GHSA-cxrx-q234-m22m	quarkus-http-core@5.3.2	5.3.4
Low	GHSA-p5mv-gj8j-xqgf	keycloak-saml-core@26.0.6	26.6.2
Low	GHSA-37gf-gmxv-74wv	keycloak-services@26.0.6	26.4.9
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.111.Final	4.1.133.Final
Low	GHSA-qcxp-gm7m-4j5v	quarkus-vertx-http@3.15.1	3.20.6.2
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.111.Final	4.1.132.Final
Low	GHSA-hq9p-pm7w-8p54	postgresql@42.7.4	42.7.7
Low	GHSA-rc95-pcm8-65v9	quarkus-vertx-http@3.15.1	3.20.6.1
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.111.Final	4.1.133.Final
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.111.Final	4.1.135.Final
Low	GHSA-rp95-xpg9-c2cq	keycloak-services@26.0.6	26.6.2
Low	GHSA-w3g8-r9gw-qrh8	keycloak-quarkus-server@26.0.6	26.0.8
Low	GHSA-cc37-9q2j-3hfv	netty-codec-haproxy@4.1.111.Final	4.1.135.Final
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.78.1	1.80.2
Low	GHSA-hcvw-475w-8g7p	keycloak-services@26.0.6	26.2.13
Low	GHSA-hw58-3793-42gg	keycloak-services@26.0.6	26.2.2
Low	GHSA-hf67-5vvq-fm3r	keycloak-services@26.0.6	26.6.2
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.111.Final	4.1.137.Final
Low	RHSA-2026:28253	libtasn1@4.16.0-8.el9_1	0:4.16.0-10.el9_8
Low	GHSA-x4p7-7chp-64hq	keycloak-server-spi-private@26.0.6	26.5.5
Low	GHSA-x4p7-7chp-64hq	keycloak-services@26.0.6	26.5.5
Low	GHSA-h4wv-g838-66g3	keycloak-services@26.0.6	26.5.7

Used by

1 chart

Chart	Version	Tag	Containers
keycloaksb-helm-charts	0.3.0	26.0.6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.