Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
3/11/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
5
Debian Base
15
Debian Slim
63
Alpine
90
Root
Alpine
Free 3/11/2026
python:3.12.10-alpine 67
Total Vulns
63
Fixable Vulns
67
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (63)
Won't Fix (0)
Not Fixed (0)
Unknown (4)
Chainguard
Paid 3/11/2026
cgr.dev/chainguard/python:latest 4
Total Vulns
0
Fixable Vulns
53
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (4)
Debian Base
Free 3/11/2026
python:latest 1480
Total Vulns
5
Fixable Vulns
1729
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (5)
Won't Fix (238)
Not Fixed (1237)
Unknown (0)
Debian Slim
Free 3/11/2026
python:3.12-slim 79
Total Vulns
15
Fixable Vulns
189
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (15)
Won't Fix (15)
Not Fixed (49)
Unknown (0)
Google Distroless
Free 3/11/2026
gcr.io/distroless/python3:latest 107
Total Vulns
0
Fixable Vulns
134
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (74)
Not Fixed (33)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 3/11/2026
rootpublic/python:3.12-bookworm-slim 189
Total Vulns
90
Fixable Vulns
189
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (90)
Won't Fix (29)
Not Fixed (70)
Unknown (0)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
1
Alpine
678
Debian Base
689
Root
Alpine
Free 3/11/2026
golang:alpine 4
Total Vulns
1
Fixable Vulns
108
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 3/11/2026
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
11
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 3/11/2026
golang:1.22.12-bookworm 1321
Total Vulns
678
Fixable Vulns
1321
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (678)
Won't Fix (147)
Not Fixed (536)
Unknown (-40)
Google Distroless
Free 3/11/2026
gcr.io/distroless/base-debian12:latest 11
Total Vulns
0
Fixable Vulns
24
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (3)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 3/11/2026
rootpublic/golang:1.23.3-bookworm-slim 728
Total Vulns
689
Fixable Vulns
728
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (689)
Won't Fix (25)
Not Fixed (56)
Unknown (-42)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
95
Root
103
Alpine
194
Debian Base
Alpine
Free 3/11/2026
eclipse-temurin:24-jdk-alpine 132
Total Vulns
103
Fixable Vulns
131
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (103)
Won't Fix (0)
Not Fixed (0)
Unknown (29)
Chainguard
Paid 3/11/2026
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
40
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 3/11/2026
eclipse-temurin:24-jdk-noble 394
Total Vulns
194
Fixable Vulns
394
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (194)
Won't Fix (0)
Not Fixed (200)
Unknown (0)
Google Distroless
Free 3/11/2026
gcr.io/distroless/java21:latest 21
Total Vulns
0
Fixable Vulns
35
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (8)
Not Fixed (13)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 3/11/2026
rootpublic/openjdk:22-jdk-bookworm-slim 243
Total Vulns
95
Fixable Vulns
243
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (95)
Won't Fix (43)
Not Fixed (105)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
3
Debian Slim
3
Debian Base
4
Alpine
59
Root
Alpine
Free 3/11/2026
node:alpine 7
Total Vulns
4
Fixable Vulns
54
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 3/11/2026
cgr.dev/chainguard/node:latest 0
Total Vulns
0
Fixable Vulns
92
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 3/11/2026
node:latest 1473
Total Vulns
3
Fixable Vulns
1491
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (266)
Not Fixed (1204)
Unknown (0)
Debian Slim
Free 3/11/2026
node:current-bookworm-slim 83
Total Vulns
3
Fixable Vulns
138
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (25)
Not Fixed (55)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 3/11/2026
rootpublic/node:23.11-bookworm-slim 138
Total Vulns
59
Fixable Vulns
138
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (59)
Won't Fix (25)
Not Fixed (54)
Unknown (0)