Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
4/27/2026
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
2
Debian Base
14
Debian Slim
87
Alpine
107
Root
Alpine
Free 4/27/2026
python:3.12.10-alpine 98
Total Vulns
87
Fixable Vulns
98
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (87)
Won't Fix (0)
Not Fixed (1)
Unknown (10)
Chainguard
Paid 4/27/2026
cgr.dev/chainguard/python:latest 6
Total Vulns
0
Fixable Vulns
100
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Debian Base
Free 4/27/2026
python:latest 1424
Total Vulns
2
Fixable Vulns
1471
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (2)
Won't Fix (384)
Not Fixed (1032)
Unknown (6)
Debian Slim
Free 4/27/2026
python:3.12-slim 124
Total Vulns
14
Fixable Vulns
259
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (14)
Won't Fix (53)
Not Fixed (51)
Unknown (6)
Google Distroless
Free 4/27/2026
gcr.io/distroless/python3:latest 156
Total Vulns
0
Fixable Vulns
185
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (118)
Not Fixed (38)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 4/27/2026
rootpublic/python:3.12-bookworm-slim 259
Total Vulns
107
Fixable Vulns
259
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (107)
Won't Fix (73)
Not Fixed (73)
Unknown (6)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
881
Debian Base
890
Root
Alpine
Free 4/27/2026
golang:alpine 3
Total Vulns
0
Fixable Vulns
236
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 4/27/2026
cgr.dev/chainguard/go:latest 1
Total Vulns
0
Fixable Vulns
161
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 4/27/2026
golang:1.22.12-bookworm 1711
Total Vulns
881
Fixable Vulns
1711
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (881)
Won't Fix (237)
Not Fixed (593)
Unknown (0)
Google Distroless
Free 4/27/2026
gcr.io/distroless/base-debian12:latest 16
Total Vulns
0
Fixable Vulns
35
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (8)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/27/2026
rootpublic/golang:1.23.3-bookworm-slim 1015
Total Vulns
890
Fixable Vulns
1015
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (890)
Won't Fix (68)
Not Fixed (57)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
109
Root
144
Alpine
219
Debian Base
Alpine
Free 4/27/2026
eclipse-temurin:24-jdk-alpine 187
Total Vulns
144
Fixable Vulns
181
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (144)
Won't Fix (0)
Not Fixed (0)
Unknown (43)
Chainguard
Paid 4/27/2026
cgr.dev/chainguard/jdk:latest 10
Total Vulns
0
Fixable Vulns
78
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (10)
Debian Base
Free 4/27/2026
eclipse-temurin:24-jdk-noble 517
Total Vulns
219
Fixable Vulns
517
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (219)
Won't Fix (37)
Not Fixed (261)
Unknown (0)
Google Distroless
Free 4/27/2026
gcr.io/distroless/java21:latest 30
Total Vulns
0
Fixable Vulns
32
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (16)
Not Fixed (14)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/27/2026
rootpublic/openjdk:22-jdk-bookworm-slim 322
Total Vulns
109
Fixable Vulns
322
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (109)
Won't Fix (106)
Not Fixed (107)
Unknown (0)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Minimus
3
Alpine
3
Debian Slim
3
Debian Base
5
Chainguard
69
Root
Alpine
Free 4/27/2026
node:alpine 6
Total Vulns
3
Fixable Vulns
84
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (0)
Not Fixed (0)
Unknown (3)
Chainguard
Paid 4/27/2026
cgr.dev/chainguard/node:latest 6
Total Vulns
5
Fixable Vulns
137
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (5)
Won't Fix (0)
Not Fixed (0)
Unknown (1)
Debian Base
Free 4/27/2026
node:latest 1399
Total Vulns
3
Fixable Vulns
1399
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (394)
Not Fixed (1002)
Unknown (0)
Debian Slim
Free 4/27/2026
node:current-bookworm-slim 127
Total Vulns
3
Fixable Vulns
192
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (3)
Won't Fix (68)
Not Fixed (56)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 4/27/2026
rootpublic/node:23.11-bookworm-slim 192
Total Vulns
69
Fixable Vulns
192
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (69)
Won't Fix (68)
Not Fixed (55)
Unknown (0)