Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
4/8/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
3
Debian Base
13
Debian Slim
61
Alpine
88
Root
Alpine
Free 4/8/2026
python:3.12.10-alpine 74
Total Vulns
61
Fixable Vulns
74
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (61)
Won't Fix (0)
Not Fixed (0)
Unknown (13)
Chainguard
Paid 4/8/2026
cgr.dev/chainguard/python:latest 6
Total Vulns
0
Fixable Vulns
71
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Debian Base
Free 4/8/2026
python:latest 1206
Total Vulns
3
Fixable Vulns
1206
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (294)
Not Fixed (902)
Unknown (7)
Debian Slim
Free 4/8/2026
python:3.12-slim 114
Total Vulns
13
Fixable Vulns
227
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (13)
Won't Fix (43)
Not Fixed (51)
Unknown (7)
Google Distroless
Free 4/8/2026
gcr.io/distroless/python3:latest 136
Total Vulns
0
Fixable Vulns
164
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (82)
Not Fixed (54)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 4/8/2026
rootpublic/python:3.12-bookworm-slim 227
Total Vulns
88
Fixable Vulns
227
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (88)
Won't Fix (60)
Not Fixed (72)
Unknown (7)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
1
Alpine
686
Debian Base
689
Root
Alpine
Free 4/8/2026
golang:alpine 6
Total Vulns
1
Fixable Vulns
130
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (5)
Chainguard
Paid 4/8/2026
cgr.dev/chainguard/go:latest 1
Total Vulns
0
Fixable Vulns
49
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 4/8/2026
golang:1.22.12-bookworm 1464
Total Vulns
686
Fixable Vulns
1464
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (686)
Won't Fix (201)
Not Fixed (577)
Unknown (0)
Google Distroless
Free 4/8/2026
gcr.io/distroless/base-debian12:latest 14
Total Vulns
0
Fixable Vulns
27
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (6)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/8/2026
rootpublic/golang:1.23.3-bookworm-slim 801
Total Vulns
689
Fixable Vulns
801
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (689)
Won't Fix (55)
Not Fixed (57)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
97
Root
108
Alpine
197
Debian Base
Alpine
Free 4/8/2026
eclipse-temurin:24-jdk-alpine 152
Total Vulns
108
Fixable Vulns
146
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (108)
Won't Fix (0)
Not Fixed (0)
Unknown (44)
Chainguard
Paid 4/8/2026
cgr.dev/chainguard/jdk:latest 1
Total Vulns
0
Fixable Vulns
55
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 4/8/2026
eclipse-temurin:24-jdk-noble 407
Total Vulns
197
Fixable Vulns
407
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (197)
Won't Fix (0)
Not Fixed (210)
Unknown (0)
Google Distroless
Free 4/8/2026
gcr.io/distroless/java21:latest 25
Total Vulns
0
Fixable Vulns
27
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (13)
Not Fixed (12)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/8/2026
rootpublic/openjdk:22-jdk-bookworm-slim 291
Total Vulns
97
Fixable Vulns
291
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (97)
Won't Fix (88)
Not Fixed (106)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
3
Debian Slim
3
Debian Base
4
Alpine
69
Root
Alpine
Free 4/8/2026
node:alpine 9
Total Vulns
4
Fixable Vulns
68
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (0)
Not Fixed (0)
Unknown (5)
Chainguard
Paid 4/8/2026
cgr.dev/chainguard/node:latest 1
Total Vulns
0
Fixable Vulns
119
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 4/8/2026
node:latest 1486
Total Vulns
3
Fixable Vulns
1490
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (353)
Not Fixed (1130)
Unknown (0)
Debian Slim
Free 4/8/2026
node:current-bookworm-slim 114
Total Vulns
3
Fixable Vulns
179
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (55)
Not Fixed (56)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/8/2026
rootpublic/node:23.11-bookworm-slim 179
Total Vulns
69
Fixable Vulns
179
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (69)
Won't Fix (55)
Not Fixed (55)
Unknown (0)