Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
11/4/2025
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
1
Debian Slim
2
Debian Base
19
Alpine
49
Root
Alpine
Free 11/4/2025
python:3.12.10-alpine 25
Total Vulns
19
Fixable Vulns
25
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (19)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 11/4/2025
cgr.dev/chainguard/python:latest 0
Total Vulns
0
Fixable Vulns
26
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 11/4/2025
python:latest 731
Total Vulns
2
Fixable Vulns
1187
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (2)
Won't Fix (99)
Not Fixed (630)
Unknown (0)
Debian Slim
Free 11/4/2025
python:3.12-slim 48
Total Vulns
1
Fixable Vulns
135
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (7)
Not Fixed (40)
Unknown (0)
Google Distroless
Free 11/4/2025
gcr.io/distroless/python3:latest 52
Total Vulns
0
Fixable Vulns
79
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (18)
Not Fixed (34)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 11/4/2025
rootpublic/python:3.12-bookworm-slim 135
Total Vulns
49
Fixable Vulns
135
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (49)
Won't Fix (27)
Not Fixed (63)
Unknown (-4)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
0
Debian Base
410
Root
Alpine
Free 11/4/2025
golang:alpine 6
Total Vulns
0
Fixable Vulns
327
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 11/4/2025
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
370
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 11/4/2025
golang:latest 395
Total Vulns
0
Fixable Vulns
883
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (28)
Not Fixed (367)
Unknown (0)
Google Distroless
Free 11/4/2025
gcr.io/distroless/base-debian12:latest 8
Total Vulns
0
Fixable Vulns
13
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 11/4/2025
rootpublic/golang:1.23.3-bookworm-slim 481
Total Vulns
410
Fixable Vulns
481
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (410)
Won't Fix (23)
Not Fixed (48)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
3
Google Distroless
13
Debian Base
16
Alpine
60
Root
Alpine
Free 11/4/2025
eclipse-temurin:24-jdk-alpine 48
Total Vulns
16
Fixable Vulns
53
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (16)
Won't Fix (0)
Not Fixed (0)
Unknown (32)
Chainguard
Paid 11/4/2025
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
11
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 11/4/2025
eclipse-temurin:24-jdk-noble 227
Total Vulns
13
Fixable Vulns
251
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (13)
Won't Fix (0)
Not Fixed (214)
Unknown (0)
Google Distroless
Free 11/4/2025
gcr.io/distroless/java21:latest 19
Total Vulns
3
Fixable Vulns
31
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (0)
Not Fixed (16)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 11/4/2025
rootpublic/openjdk:22-jdk-bookworm-slim 170
Total Vulns
60
Fixable Vulns
170
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (60)
Won't Fix (28)
Not Fixed (86)
Unknown (-4)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Minimus
1
Chainguard
1
Alpine
1
Debian Slim
1
Debian Base
22
Root
Alpine
Free 11/4/2025
node:alpine 7
Total Vulns
1
Fixable Vulns
12
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 11/4/2025
cgr.dev/chainguard/node:latest 1
Total Vulns
1
Fixable Vulns
17
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 11/4/2025
node:latest 839
Total Vulns
1
Fixable Vulns
1144
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (161)
Not Fixed (677)
Unknown (0)
Debian Slim
Free 11/4/2025
node:current-bookworm-slim 71
Total Vulns
1
Fixable Vulns
91
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (1)
Won't Fix (23)
Not Fixed (47)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 11/4/2025
rootpublic/node:23.11-bookworm-slim 91
Total Vulns
22
Fixable Vulns
91
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (22)
Won't Fix (23)
Not Fixed (46)
Unknown (0)