Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
12/6/2025
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
1
Debian Base
4
Debian Slim
28
Alpine
52
Root
Alpine
Free 12/6/2025
python:3.12.10-alpine 28
Total Vulns
28
Fixable Vulns
28
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (28)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Chainguard
Paid 12/6/2025
cgr.dev/chainguard/python:latest 0
Total Vulns
0
Fixable Vulns
2
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 12/6/2025
python:latest 764
Total Vulns
1
Fixable Vulns
769
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (101)
Not Fixed (662)
Unknown (0)
Debian Slim
Free 12/6/2025
python:3.12-slim 51
Total Vulns
4
Fixable Vulns
137
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (7)
Not Fixed (40)
Unknown (0)
Google Distroless
Free 12/6/2025
gcr.io/distroless/python3:latest 61
Total Vulns
0
Fixable Vulns
88
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (23)
Not Fixed (38)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 12/6/2025
rootpublic/python:3.12-bookworm-slim 137
Total Vulns
52
Fixable Vulns
137
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (52)
Won't Fix (27)
Not Fixed (62)
Unknown (-4)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
421
Debian Base
431
Root
Alpine
Free 12/6/2025
golang:alpine 0
Total Vulns
0
Fixable Vulns
348
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Chainguard
Paid 12/6/2025
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
417
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 12/6/2025
golang:1.22.12-bookworm 918
Total Vulns
421
Fixable Vulns
918
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (421)
Won't Fix (80)
Not Fixed (421)
Unknown (-4)
Google Distroless
Free 12/6/2025
gcr.io/distroless/base-debian12:latest 8
Total Vulns
0
Fixable Vulns
13
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 12/6/2025
rootpublic/golang:1.23.3-bookworm-slim 502
Total Vulns
431
Fixable Vulns
502
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (431)
Won't Fix (23)
Not Fixed (48)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
26
Alpine
60
Root
109
Debian Base
Alpine
Free 12/6/2025
eclipse-temurin:24-jdk-alpine 52
Total Vulns
26
Fixable Vulns
57
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (26)
Won't Fix (0)
Not Fixed (0)
Unknown (26)
Chainguard
Paid 12/6/2025
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 12/6/2025
eclipse-temurin:24-jdk-noble 234
Total Vulns
109
Fixable Vulns
258
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (109)
Won't Fix (0)
Not Fixed (125)
Unknown (0)
Google Distroless
Free 12/6/2025
gcr.io/distroless/java21:latest 22
Total Vulns
0
Fixable Vulns
37
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (2)
Not Fixed (20)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 12/6/2025
rootpublic/openjdk:22-jdk-bookworm-slim 178
Total Vulns
60
Fixable Vulns
178
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (60)
Won't Fix (30)
Not Fixed (92)
Unknown (-4)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
3
Alpine
3
Debian Slim
3
Debian Base
23
Root
Alpine
Free 12/6/2025
node:alpine 3
Total Vulns
3
Fixable Vulns
13
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Chainguard
Paid 12/6/2025
cgr.dev/chainguard/node:latest 0
Total Vulns
0
Fixable Vulns
19
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 12/6/2025
node:latest 891
Total Vulns
3
Fixable Vulns
891
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (180)
Not Fixed (708)
Unknown (0)
Debian Slim
Free 12/6/2025
node:current-bookworm-slim 73
Total Vulns
3
Fixable Vulns
92
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (23)
Not Fixed (47)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 12/6/2025
rootpublic/node:23.11-bookworm-slim 92
Total Vulns
23
Fixable Vulns
92
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (23)
Won't Fix (23)
Not Fixed (46)
Unknown (0)