Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
7/20/2025
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
9
Debian Base
14
Debian Slim
62
Alpine
87
Root
Alpine
Free 2/4/2026
python:3.12.10-alpine 65
Total Vulns
62
Fixable Vulns
65
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (62)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 2/4/2026
cgr.dev/chainguard/python:latest 8
Total Vulns
0
Fixable Vulns
46
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (8)
Debian Base
Free 2/4/2026
python:latest 947
Total Vulns
9
Fixable Vulns
1173
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (9)
Won't Fix (210)
Not Fixed (728)
Unknown (0)
Debian Slim
Free 2/4/2026
python:3.12-slim 76
Total Vulns
14
Fixable Vulns
186
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (14)
Won't Fix (22)
Not Fixed (40)
Unknown (0)
Google Distroless
Free 2/4/2026
gcr.io/distroless/python3:latest 92
Total Vulns
0
Fixable Vulns
130
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (42)
Not Fixed (50)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 2/4/2026
rootpublic/python:3.12-bookworm-slim 186
Total Vulns
87
Fixable Vulns
186
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (87)
Won't Fix (36)
Not Fixed (63)
Unknown (0)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
556
Debian Base
561
Root
Alpine
Free 2/4/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
77
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 2/4/2026
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
96
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 2/4/2026
golang:1.22.12-bookworm 1182
Total Vulns
556
Fixable Vulns
1182
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (556)
Won't Fix (125)
Not Fixed (501)
Unknown (0)
Google Distroless
Free 2/4/2026
gcr.io/distroless/base-debian12:latest 11
Total Vulns
0
Fixable Vulns
24
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (3)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 2/4/2026
rootpublic/golang:1.23.3-bookworm-slim 642
Total Vulns
561
Fixable Vulns
642
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (561)
Won't Fix (32)
Not Fixed (49)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
90
Root
92
Alpine
180
Debian Base
Alpine
Free 2/4/2026
eclipse-temurin:24-jdk-alpine 121
Total Vulns
92
Fixable Vulns
120
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (92)
Won't Fix (0)
Not Fixed (0)
Unknown (29)
Chainguard
Paid 2/4/2026
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
38
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 2/4/2026
eclipse-temurin:24-jdk-noble 325
Total Vulns
180
Fixable Vulns
325
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (180)
Won't Fix (0)
Not Fixed (145)
Unknown (0)
Google Distroless
Free 2/4/2026
gcr.io/distroless/java21:latest 20
Total Vulns
0
Fixable Vulns
31
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (9)
Not Fixed (11)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 2/4/2026
rootpublic/openjdk:22-jdk-bookworm-slim 238
Total Vulns
90
Fixable Vulns
238
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (90)
Won't Fix (52)
Not Fixed (96)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Minimus
1
Chainguard
1
Alpine
1
Debian Slim
1
Debian Base
48
Root
Alpine
Free 2/4/2026
node:alpine 4
Total Vulns
1
Fixable Vulns
41
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 2/4/2026
cgr.dev/chainguard/node:latest 1
Total Vulns
1
Fixable Vulns
75
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 2/4/2026
node:latest 1019
Total Vulns
1
Fixable Vulns
1095
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (247)
Not Fixed (771)
Unknown (0)
Debian Slim
Free 2/4/2026
node:current-bookworm-slim 81
Total Vulns
1
Fixable Vulns
127
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (32)
Not Fixed (48)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 2/4/2026
rootpublic/node:23.11-bookworm-slim 127
Total Vulns
48
Fixable Vulns
127
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (48)
Won't Fix (32)
Not Fixed (47)
Unknown (0)