StackRadar

CVE-2026-2575

Medium

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
3 of 3
affected packages

Keycloak: Denial of Service due to excessive SAMLRequest decompression

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
keycloak-saml-coremaven11.0.0, 12.0.3, 14.0.0, 17.0.1+14 more26.5.420
keycloak-servicesmaven14.0.0, 17.0.1, 19.0.3, 20.0.1+12 more26.5.418
keycloak-saml-adapter-coremaven11.0.0, 12.0.326.5.42
OSV records
GHSA-xv6h-r36f-3gp5
Also known as
BIT-keycloak-2026-2575

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-saml-core@17.0.1
keycloak-services@17.0.1
26.5.4
26.5.4

Open the chart page →

7,713
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
keycloak-saml-core@23.0.3
keycloak-services@23.0.3
26.5.4
26.5.4

Open the chart page →

4,406
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-saml-core@20.0.5
keycloak-services@20.0.5
26.5.4
26.5.4

Open the chart page →

37,373
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-saml-core@17.0.1
keycloak-services@17.0.1
26.5.4
26.5.4

Open the chart page →

7,713
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
keycloak-saml-core@26.3.3
keycloak-services@26.3.3
26.5.4
26.5.4

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-saml-core@19.0.3
keycloak-services@19.0.3
26.5.4
26.5.4

Open the chart page →

13,352
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
keycloak-saml-core@24.0.3
keycloak-services@24.0.3
26.5.4
26.5.4

Open the chart page →

2,381
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.49409c59bdfb6
keycloak-saml-core@26.4.7
keycloak-services@26.4.7
26.5.4
26.5.4

Open the chart page →

13,936
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-saml-core@20.0.5
keycloak-services@20.0.5
26.5.4
26.5.4

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-saml-core@20.0.5
keycloak-services@20.0.5
26.5.4
26.5.4

Open the chart page →

6,915
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
keycloak-saml-core@26.1.4
keycloak-services@26.1.4
26.5.4
26.5.4

Open the chart page →

45,239
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
keycloak-saml-adapter-core@11.0.0
keycloak-saml-core@11.0.0
26.5.4
26.5.4

Open the chart page →

12,856
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
keycloak-saml-core@24.0.4
keycloak-services@24.0.4
26.5.4
26.5.4

Open the chart page →

15,369
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
keycloak-saml-core@26.0.7
keycloak-services@26.0.7
26.5.4
26.5.4

Open the chart page →

2,097
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
keycloak-saml-core@26.0.6
keycloak-services@26.0.6
26.5.4
26.5.4

Open the chart page →

2,590
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
keycloak-saml-core@26.3.3
keycloak-services@26.3.3
26.5.4
26.5.4

Open the chart page →

1,690
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-saml-core@20.0.1
keycloak-services@20.0.1
26.5.4
26.5.4

Open the chart page →

6,443
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
keycloak-saml-adapter-core@12.0.3
keycloak-saml-core@12.0.3
26.5.4
26.5.4

Open the chart page →

4,946
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
keycloak-saml-core@26.0.8
keycloak-services@26.0.8
26.5.4
26.5.4

Open the chart page →

5,063
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
keycloak-saml-core@26.1.4
keycloak-services@26.1.4
26.5.4
26.5.4

Open the chart page →

45,239
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-saml-core@14.0.0
keycloak-services@14.0.0
26.5.4
26.5.4

Open the chart page →

28,605
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
keycloak-saml-core@26.5.0
keycloak-services@26.5.0
26.5.4
26.5.4

Open the chart page →

7,624
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-2575.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-saml-core@20.0.3
keycloak-services@20.0.3
26.5.4
26.5.4

Open the chart page →

6,016

Container images carrying it

20 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.1.4044a457e0498
keycloak-saml-core@26.1.4
keycloak-services@26.1.4
26.5.4
26.5.4
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-saml-core@20.0.5
keycloak-services@20.0.5
26.5.4
26.5.4
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-saml-core@17.0.1
keycloak-services@17.0.1
26.5.4
26.5.4
2
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-saml-core@19.0.3
keycloak-services@19.0.3
26.5.4
26.5.4
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-saml-core@20.0.5
keycloak-services@20.0.5
26.5.4
26.5.4
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
keycloak-saml-core@24.0.4
keycloak-services@24.0.4
26.5.4
26.5.4
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
keycloak-saml-core@26.3.3
keycloak-services@26.3.3
26.5.4
26.5.4
1
sonatype/nexus3:3.58.1586060431b64
keycloak-saml-adapter-core@12.0.3
keycloak-saml-core@12.0.3
26.5.4
26.5.4
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
keycloak-saml-adapter-core@11.0.0
keycloak-saml-core@11.0.0
26.5.4
26.5.4
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
keycloak-saml-core@26.5.0
keycloak-services@26.5.0
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:26.009a381c715ab
keycloak-saml-core@26.0.8
keycloak-services@26.0.8
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-saml-core@14.0.0
keycloak-services@14.0.0
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
keycloak-saml-core@26.0.7
keycloak-services@26.0.7
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
keycloak-saml-core@24.0.3
keycloak-services@24.0.3
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
keycloak-saml-core@23.0.3
keycloak-services@23.0.3
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
keycloak-saml-core@26.3.3
keycloak-services@26.3.3
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-saml-core@20.0.1
keycloak-services@20.0.1
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
keycloak-saml-core@26.4.7
keycloak-services@26.4.7
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
keycloak-saml-core@26.0.6
keycloak-services@26.0.6
26.5.4
26.5.4
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-saml-core@20.0.3
keycloak-services@20.0.3
26.5.4
26.5.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.