diff --git a/backend/src/main/resources/application.properties b/backend/src/main/resources/application.properties
index 52425262..76d81e38 100644
--- a/backend/src/main/resources/application.properties
+++ b/backend/src/main/resources/application.properties
@@ -33,7 +33,7 @@ hub.keycloak.oidc.cryptomator-client-id=cryptomator
 %dev.quarkus.keycloak.devservices.start-command=start-dev
 %dev.quarkus.keycloak.devservices.port=8180
 %dev.quarkus.keycloak.devservices.service-name=quarkus-cryptomator-hub
-%dev.quarkus.keycloak.devservices.image-name=ghcr.io/cryptomator/keycloak:23.0.6
+%dev.quarkus.keycloak.devservices.image-name=ghcr.io/cryptomator/keycloak:23.0.7
 %dev.quarkus.oidc.devui.grant.type=code
 # OIDC will be mocked during unit tests. Use fake auth url to prevent dev services to start:
 %test.quarkus.oidc.auth-server-url=http://localhost:43210/dev/null
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a268467b..5cc907a4 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -16,7 +16,7 @@
         "file-saver": "^2.0.5",
         "jdenticon": "^3.2.0",
         "jszip": "^3.10.1",
-        "keycloak-js": "^23.0.6",
+        "keycloak-js": "^23.0.7",
         "miscreant": "^0.3.2",
         "rfc4648": "^1.5.3",
         "semver": "^7.6.0",
@@ -4075,9 +4075,9 @@
       }
     },
     "node_modules/keycloak-js": {
-      "version": "23.0.6",
-      "resolved": "https://registry.npmjs.org/keycloak-js/-/keycloak-js-23.0.6.tgz",
-      "integrity": "sha512-Pn7iIEHPn7BcQFCbViKRv+8+v9l82oWNRVQr9wQGjp2BNEl9JpTsXjp84xQjwzaLKghG7QV7VwZrWBhiXJeM0Q==",
+      "version": "23.0.7",
+      "resolved": "https://registry.npmjs.org/keycloak-js/-/keycloak-js-23.0.7.tgz",
+      "integrity": "sha512-OmszsKzBhhm5yP4W1q/tMd+nNnKpOAdeVYcoGhphlv8Fj1bNk4wRTYzp7pn5BkvueLz7fhvKHz7uOc33524YrA==",
       "dependencies": {
         "base64-js": "^1.5.1",
         "js-sha256": "^0.10.1",
diff --git a/frontend/package.json b/frontend/package.json
index 05934c48..6810a823 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -55,7 +55,7 @@
     "file-saver": "^2.0.5",
     "jdenticon": "^3.2.0",
     "jszip": "^3.10.1",
-    "keycloak-js": "^23.0.6",
+    "keycloak-js": "^23.0.7",
     "miscreant": "^0.3.2",
     "rfc4648": "^1.5.3",
     "semver": "^7.6.0",
diff --git a/keycloak/Dockerfile b/keycloak/Dockerfile
index 3797b058..a5f3c4cd 100644
--- a/keycloak/Dockerfile
+++ b/keycloak/Dockerfile
@@ -1,4 +1,4 @@
-FROM quay.io/keycloak/keycloak:23.0.6 as builder
+FROM quay.io/keycloak/keycloak:23.0.7 as builder
 ENV KC_HEALTH_ENABLED=true
 ENV KC_METRICS_ENABLED=true
 ENV KC_HTTP_RELATIVE_PATH=/kc
@@ -11,7 +11,7 @@ FROM registry.access.redhat.com/ubi9 AS ubi-micro-build
 RUN mkdir -p /mnt/rootfs
 RUN dnf install --installroot /mnt/rootfs curl --releasever 9 --setopt install_weak_deps=false --nodocs -y; dnf --installroot /mnt/rootfs clean all
 
-FROM quay.io/keycloak/keycloak:23.0.6
+FROM quay.io/keycloak/keycloak:23.0.7
 LABEL maintainer="info@skymatic.de"
 COPY --from=builder /opt/keycloak/ /opt/keycloak/
 COPY --from=ubi-micro-build /mnt/rootfs /