Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
7/20/2025
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
21
Google Distroless
29
Debian Slim
134
Alpine
186
Root
335
Debian Base
Alpine
Free 7/14/2026
python:3.12.10-alpine 144
Total Vulns
134
Fixable Vulns
144
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (134)
Won't Fix (0)
Not Fixed (0)
Unknown (10)
Chainguard
Paid 7/14/2026
cgr.dev/chainguard/python:latest 7
Total Vulns
0
Fixable Vulns
82
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (7)
Debian Base
Free 7/14/2026
python:latest 1850
Total Vulns
335
Fixable Vulns
1850
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (335)
Won't Fix (421)
Not Fixed (1090)
Unknown (4)
Debian Slim
Free 7/14/2026
python:3.12-slim 155
Total Vulns
29
Fixable Vulns
353
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (29)
Won't Fix (56)
Not Fixed (66)
Unknown (4)
Google Distroless
Free 7/14/2026
gcr.io/distroless/python3:latest 136
Total Vulns
21
Fixable Vulns
257
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (21)
Won't Fix (58)
Not Fixed (57)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 7/14/2026
rootpublic/python:3.12-bookworm-slim 353
Total Vulns
186
Fixable Vulns
353
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (186)
Won't Fix (64)
Not Fixed (99)
Unknown (4)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
1139
Root
1240
Debian Base
Alpine
Free 7/14/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
343
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 7/14/2026
cgr.dev/chainguard/go:latest 1
Total Vulns
0
Fixable Vulns
21
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 7/14/2026
golang:1.22.12-bookworm 2139
Total Vulns
1240
Fixable Vulns
2139
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1240)
Won't Fix (224)
Not Fixed (675)
Unknown (0)
Google Distroless
Free 7/14/2026
gcr.io/distroless/base-debian12:latest 13
Total Vulns
0
Fixable Vulns
47
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (5)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 7/14/2026
rootpublic/golang:1.23.3-bookworm-slim 1276
Total Vulns
1139
Fixable Vulns
1276
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (1139)
Won't Fix (57)
Not Fixed (80)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
200
Root
219
Alpine
275
Debian Base
Alpine
Free 7/14/2026
eclipse-temurin:24-jdk-alpine 267
Total Vulns
219
Fixable Vulns
216
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (219)
Won't Fix (0)
Not Fixed (0)
Unknown (48)
Chainguard
Paid 7/14/2026
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
107
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 7/14/2026
eclipse-temurin:24-jdk-noble 628
Total Vulns
275
Fixable Vulns
628
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (275)
Won't Fix (37)
Not Fixed (316)
Unknown (0)
Google Distroless
Free 7/14/2026
gcr.io/distroless/java21:latest 44
Total Vulns
0
Fixable Vulns
52
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (17)
Not Fixed (27)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 7/14/2026
rootpublic/openjdk:22-jdk-bookworm-slim 455
Total Vulns
200
Fixable Vulns
455
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (200)
Won't Fix (104)
Not Fixed (151)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
4
Alpine
4
Debian Slim
115
Root
335
Debian Base
Alpine
Free 7/14/2026
node:alpine 7
Total Vulns
4
Fixable Vulns
49
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 7/14/2026
cgr.dev/chainguard/node:latest 2
Total Vulns
0
Fixable Vulns
65
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Debian Base
Free 7/14/2026
node:latest 1811
Total Vulns
335
Fixable Vulns
1811
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (335)
Won't Fix (409)
Not Fixed (1067)
Unknown (0)
Debian Slim
Free 7/14/2026
node:current-bookworm-slim 138
Total Vulns
4
Fixable Vulns
248
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (55)
Not Fixed (79)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 7/14/2026
rootpublic/node:23.11-bookworm-slim 248
Total Vulns
115
Fixable Vulns
248
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (115)
Won't Fix (55)
Not Fixed (78)
Unknown (0)