diff --git a/assets/js/hubsetup.js b/assets/js/hubsetup.js
index 231afd8c41..a6e048c4c5 100644
--- a/assets/js/hubsetup.js
+++ b/assets/js/hubsetup.js
@@ -421,7 +421,7 @@ EOF`;
         'init-config': {condition: 'service_completed_successfully'},
         'postgres': {condition: 'service_healthy'}
       },
-      image: 'ghcr.io/cryptomator/keycloak:22.0.3',
+      image: 'ghcr.io/cryptomator/keycloak:22.0.4',
       command: startCmd,
       volumes: ['kc-config:/opt/keycloak/data/import'],
       deploy: {
@@ -793,7 +793,7 @@ class KubernetesConfigBuilder extends ConfigBuilder {
             }],
             containers: [{
               name: 'keycloak',
-              image: 'ghcr.io/cryptomator/keycloak:22.0.1',
+              image: 'ghcr.io/cryptomator/keycloak:22.0.4',
               command: startCmd,
               ports: [{containerPort: 8080}],
               resources: {