Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
5/11/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
3
Debian Base
13
Debian Slim
89
Alpine
108
Root
Alpine
Free 5/11/2026
python:3.12.10-alpine 100
Total Vulns
89
Fixable Vulns
100
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (89)
Won't Fix (0)
Not Fixed (1)
Unknown (10)
Chainguard
Paid 5/11/2026
cgr.dev/chainguard/python:latest 3
Total Vulns
0
Fixable Vulns
12
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Debian Base
Free 5/11/2026
python:latest 1305
Total Vulns
3
Fixable Vulns
1547
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (359)
Not Fixed (937)
Unknown (6)
Debian Slim
Free 5/11/2026
python:3.12-slim 127
Total Vulns
13
Fixable Vulns
278
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (13)
Won't Fix (57)
Not Fixed (51)
Unknown (6)
Google Distroless
Free 5/11/2026
gcr.io/distroless/python3:latest 168
Total Vulns
0
Fixable Vulns
195
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (126)
Not Fixed (42)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 5/11/2026
rootpublic/python:3.12-bookworm-slim 278
Total Vulns
108
Fixable Vulns
278
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (108)
Won't Fix (77)
Not Fixed (87)
Unknown (6)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
1101
Debian Base
1121
Root
Alpine
Free 5/11/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
346
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 5/11/2026
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
284
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 5/11/2026
golang:1.22.12-bookworm 1954
Total Vulns
1101
Fixable Vulns
1954
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1101)
Won't Fix (258)
Not Fixed (595)
Unknown (0)
Google Distroless
Free 5/11/2026
gcr.io/distroless/base-debian12:latest 18
Total Vulns
0
Fixable Vulns
37
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (10)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 5/11/2026
rootpublic/golang:1.23.3-bookworm-slim 1256
Total Vulns
1121
Fixable Vulns
1256
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (1121)
Won't Fix (72)
Not Fixed (63)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
109
Root
157
Alpine
224
Debian Base
Alpine
Free 5/11/2026
eclipse-temurin:24-jdk-alpine 193
Total Vulns
157
Fixable Vulns
187
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (157)
Won't Fix (0)
Not Fixed (0)
Unknown (36)
Chainguard
Paid 5/11/2026
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
87
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 5/11/2026
eclipse-temurin:24-jdk-noble 528
Total Vulns
224
Fixable Vulns
528
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (224)
Won't Fix (37)
Not Fixed (267)
Unknown (0)
Google Distroless
Free 5/11/2026
gcr.io/distroless/java21:latest 33
Total Vulns
0
Fixable Vulns
35
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (18)
Not Fixed (15)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 5/11/2026
rootpublic/openjdk:22-jdk-bookworm-slim 345
Total Vulns
109
Fixable Vulns
345
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (109)
Won't Fix (115)
Not Fixed (121)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
1
Alpine
1
Debian Slim
1
Debian Base
70
Root
Alpine
Free 5/11/2026
node:alpine 4
Total Vulns
1
Fixable Vulns
85
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 5/11/2026
cgr.dev/chainguard/node:latest 0
Total Vulns
0
Fixable Vulns
0
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 5/11/2026
node:latest 1261
Total Vulns
1
Fixable Vulns
1441
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (347)
Not Fixed (913)
Unknown (0)
Debian Slim
Free 5/11/2026
node:current-bookworm-slim 135
Total Vulns
1
Fixable Vulns
203
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (72)
Not Fixed (62)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 5/11/2026
rootpublic/node:23.11-bookworm-slim 203
Total Vulns
70
Fixable Vulns
203
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (70)
Won't Fix (72)
Not Fixed (61)
Unknown (0)