Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
6/11/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
64
Debian Slim
95
Alpine
177
Root
319
Debian Base
Alpine
Free 6/11/2026
python:3.12.10-alpine 105
Total Vulns
95
Fixable Vulns
105
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (95)
Won't Fix (0)
Not Fixed (0)
Unknown (10)
Chainguard
Paid 6/11/2026
cgr.dev/chainguard/python:latest 7
Total Vulns
0
Fixable Vulns
18
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (7)
Debian Base
Free 6/11/2026
python:latest 1290
Total Vulns
319
Fixable Vulns
1781
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (319)
Won't Fix (260)
Not Fixed (925)
Unknown (-214)
Debian Slim
Free 6/11/2026
python:3.12-slim 162
Total Vulns
64
Fixable Vulns
316
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (64)
Won't Fix (46)
Not Fixed (55)
Unknown (-3)
Google Distroless
Free 6/11/2026
gcr.io/distroless/python3:latest 97
Total Vulns
0
Fixable Vulns
222
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (61)
Not Fixed (36)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 6/11/2026
rootpublic/python:3.12-bookworm-slim 316
Total Vulns
177
Fixable Vulns
316
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (177)
Won't Fix (60)
Not Fixed (76)
Unknown (3)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
2111
Debian Base
2159
Root
Alpine
Free 6/11/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
592
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 6/11/2026
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
499
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 6/11/2026
golang:1.22.12-bookworm 2934
Total Vulns
2111
Fixable Vulns
2934
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (2111)
Won't Fix (225)
Not Fixed (601)
Unknown (-3)
Google Distroless
Free 6/11/2026
gcr.io/distroless/base-debian12:latest 13
Total Vulns
0
Fixable Vulns
46
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (5)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 6/11/2026
rootpublic/golang:1.23.3-bookworm-slim 2272
Total Vulns
2159
Fixable Vulns
2272
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (2159)
Won't Fix (55)
Not Fixed (61)
Unknown (-3)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
157
Alpine
186
Root
263
Debian Base
Alpine
Free 6/11/2026
eclipse-temurin:24-jdk-alpine 202
Total Vulns
157
Fixable Vulns
196
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (157)
Won't Fix (0)
Not Fixed (0)
Unknown (45)
Chainguard
Paid 6/11/2026
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
87
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 6/11/2026
eclipse-temurin:24-jdk-noble 549
Total Vulns
263
Fixable Vulns
549
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (263)
Won't Fix (37)
Not Fixed (249)
Unknown (0)
Google Distroless
Free 6/11/2026
gcr.io/distroless/java21:latest 30
Total Vulns
0
Fixable Vulns
38
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (16)
Not Fixed (14)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 6/11/2026
rootpublic/openjdk:22-jdk-bookworm-slim 394
Total Vulns
186
Fixable Vulns
394
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (186)
Won't Fix (100)
Not Fixed (111)
Unknown (-3)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Alpine
13
Debian Slim
107
Root
313
Debian Base
Alpine
Free 6/11/2026
node:alpine 3
Total Vulns
0
Fixable Vulns
3
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 6/11/2026
cgr.dev/chainguard/node:latest 0
Total Vulns
0
Fixable Vulns
2
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 6/11/2026
node:latest 1243
Total Vulns
313
Fixable Vulns
1245
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (313)
Won't Fix (248)
Not Fixed (902)
Unknown (-220)
Debian Slim
Free 6/11/2026
node:current-bookworm-slim 125
Total Vulns
13
Fixable Vulns
218
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (13)
Won't Fix (53)
Not Fixed (60)
Unknown (-1)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 6/11/2026
rootpublic/node:23.11-bookworm-slim 218
Total Vulns
107
Fixable Vulns
218
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (107)
Won't Fix (53)
Not Fixed (59)
Unknown (-1)