Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
1/8/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Debian Base
5
Debian Slim
29
Alpine
53
Root
Alpine
Free 1/8/2026
python:3.12.10-alpine 32
Total Vulns
29
Fixable Vulns
32
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (29)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 1/8/2026
cgr.dev/chainguard/python:latest 0
Total Vulns
0
Fixable Vulns
5
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 1/8/2026
python:latest 914
Total Vulns
0
Fixable Vulns
931
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (226)
Not Fixed (688)
Unknown (0)
Debian Slim
Free 1/8/2026
python:3.12-slim 61
Total Vulns
5
Fixable Vulns
148
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (5)
Won't Fix (16)
Not Fixed (40)
Unknown (0)
Google Distroless
Free 1/8/2026
gcr.io/distroless/python3:latest 62
Total Vulns
0
Fixable Vulns
89
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (33)
Not Fixed (29)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 1/8/2026
rootpublic/python:3.12-bookworm-slim 148
Total Vulns
53
Fixable Vulns
148
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (53)
Won't Fix (36)
Not Fixed (63)
Unknown (-4)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
441
Debian Base
452
Root
Alpine
Free 1/8/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
3
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 1/8/2026
cgr.dev/chainguard/go:latest 1
Total Vulns
0
Fixable Vulns
1
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 1/8/2026
golang:1.22.12-bookworm 1010
Total Vulns
441
Fixable Vulns
1010
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (441)
Won't Fix (111)
Not Fixed (462)
Unknown (-4)
Google Distroless
Free 1/8/2026
gcr.io/distroless/base-debian12:latest 8
Total Vulns
0
Fixable Vulns
13
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 1/8/2026
rootpublic/golang:1.23.3-bookworm-slim 533
Total Vulns
452
Fixable Vulns
533
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (452)
Won't Fix (32)
Not Fixed (49)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
49
Alpine
65
Root
145
Debian Base
Alpine
Free 1/8/2026
eclipse-temurin:24-jdk-alpine 78
Total Vulns
49
Fixable Vulns
83
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (49)
Won't Fix (0)
Not Fixed (0)
Unknown (29)
Chainguard
Paid 1/8/2026
cgr.dev/chainguard/jdk:latest 1
Total Vulns
0
Fixable Vulns
1
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 1/8/2026
eclipse-temurin:24-jdk-noble 291
Total Vulns
145
Fixable Vulns
291
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (145)
Won't Fix (0)
Not Fixed (146)
Unknown (0)
Google Distroless
Free 1/8/2026
gcr.io/distroless/java21:latest 18
Total Vulns
0
Fixable Vulns
18
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (3)
Not Fixed (15)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 1/8/2026
rootpublic/openjdk:22-jdk-bookworm-slim 188
Total Vulns
65
Fixable Vulns
188
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (65)
Won't Fix (39)
Not Fixed (88)
Unknown (-4)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
3
Alpine
3
Debian Slim
3
Debian Base
23
Root
Alpine
Free 1/8/2026
node:alpine 6
Total Vulns
3
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 1/8/2026
cgr.dev/chainguard/node:latest 1
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 1/8/2026
node:latest 1042
Total Vulns
3
Fixable Vulns
1052
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (307)
Not Fixed (732)
Unknown (0)
Debian Slim
Free 1/8/2026
node:current-bookworm-slim 83
Total Vulns
3
Fixable Vulns
102
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (32)
Not Fixed (48)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 1/8/2026
rootpublic/node:23.11-bookworm-slim 102
Total Vulns
23
Fixable Vulns
102
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (23)
Won't Fix (32)
Not Fixed (47)
Unknown (0)