Inquiry about Keycloak's RHEL8 vulnerability response

Does the open-source software Keycloak address vulnerabilities in RHEL8? If anyone knows, please let me know.