Container Base Image Vulnerability Comparison
Compare vulnerability profiles across multiple container base images
Last Scan
9/24/2025
Scanner
Grype + Syft
Distributions
Chainguard, Distroless, Alpine, Debian, Root, Minimus
About Baseline Comparisons
- The Baseline shows vulnerability accumulation when images aren't regularly rebuilt and redeployed
- This demonstrates how every image gets vulnerabilities over time
- Average fixable vulnerabilities indicate how quickly base images are rebuilt by the maintainer
- Most audits only require fixing fixable vulnerabilities
- Root also offers paid images with backported packages for existing images
Python
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
2
Debian Slim
11
Alpine
43
Root
91
Debian Base
Alpine
Free 9/24/2025
python:3.12.10-alpine 17
Total Vulns
11
Fixable Vulns
17
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (11)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 9/24/2025
cgr.dev/chainguard/python:latest 0
Total Vulns
0
Fixable Vulns
18
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 9/24/2025
python:latest 709
Total Vulns
91
Fixable Vulns
1078
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (91)
Won't Fix (64)
Not Fixed (554)
Unknown (0)
Debian Slim
Free 9/24/2025
python:3.12-slim 49
Total Vulns
2
Fixable Vulns
128
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (2)
Won't Fix (7)
Not Fixed (40)
Unknown (0)
Google Distroless
Free 9/24/2025
gcr.io/distroless/python3:latest 45
Total Vulns
0
Fixable Vulns
70
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (16)
Not Fixed (29)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/python:latest 0
Total Vulns
0
Fixable Vulns
20
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Root
Free 9/24/2025
rootpublic/python:3.12-bookworm-slim 128
Total Vulns
43
Fixable Vulns
128
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (43)
Won't Fix (28)
Not Fixed (61)
Unknown (-4)
Go
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
0
Alpine
196
Root
197
Debian Base
Alpine
Free 9/24/2025
golang:alpine 6
Total Vulns
0
Fixable Vulns
111
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 9/24/2025
cgr.dev/chainguard/go:latest 0
Total Vulns
0
Fixable Vulns
134
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 9/24/2025
golang:1.22.12-bookworm 599
Total Vulns
197
Fixable Vulns
599
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (197)
Won't Fix (69)
Not Fixed (337)
Unknown (-4)
Google Distroless
Free 9/24/2025
gcr.io/distroless/base-debian12:latest 8
Total Vulns
0
Fixable Vulns
11
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (8)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/go:latest 2
Total Vulns
0
Fixable Vulns
97
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 9/24/2025
rootpublic/golang:1.23.3-bookworm-slim 267
Total Vulns
196
Fixable Vulns
267
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (196)
Won't Fix (23)
Not Fixed (48)
Unknown (0)
Java
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Google Distroless
4
Alpine
7
Debian Base
56
Root
Alpine
Free 9/24/2025
eclipse-temurin:24-jdk-alpine 25
Total Vulns
4
Fixable Vulns
28
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (4)
Won't Fix (0)
Not Fixed (0)
Unknown (21)
Chainguard
Paid 9/24/2025
cgr.dev/chainguard/jdk:latest 0
Total Vulns
0
Fixable Vulns
8
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 9/24/2025
eclipse-temurin:24-jdk-noble 150
Total Vulns
7
Fixable Vulns
173
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (7)
Won't Fix (0)
Not Fixed (143)
Unknown (0)
Google Distroless
Free 9/24/2025
gcr.io/distroless/java21:latest 16
Total Vulns
0
Fixable Vulns
28
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (16)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/openjdk:latest 2
Total Vulns
0
Fixable Vulns
15
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 9/24/2025
rootpublic/openjdk:22-jdk-bookworm-slim 166
Total Vulns
56
Fixable Vulns
166
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (56)
Won't Fix (28)
Not Fixed (86)
Unknown (-4)
Node.js
Average Fixable Vulnerabilities by Distribution
0
Chainguard
0
Minimus
0
Alpine
0
Debian Slim
22
Root
65
Debian Base
Alpine
Free 9/24/2025
node:alpine 6
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (6)
Chainguard
Paid 9/24/2025
cgr.dev/chainguard/node:latest 0
Total Vulns
0
Fixable Vulns
11
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (0)
Debian Base
Free 9/24/2025
node:latest 844
Total Vulns
65
Fixable Vulns
1037
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (65)
Won't Fix (177)
Not Fixed (602)
Unknown (0)
Debian Slim
Free 9/24/2025
node:current-bookworm-slim 69
Total Vulns
0
Fixable Vulns
91
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (23)
Not Fixed (46)
Unknown (0)
Minimus
Paid 8/12/2025
reg.mini.dev/node:latest 2
Total Vulns
0
Fixable Vulns
6
Baseline (5/5/25)
Vulnerabilities by Fix State
Fixable (0)
Won't Fix (0)
Not Fixed (0)
Unknown (2)
Root
Free 9/24/2025
rootpublic/node:23.11-bookworm-slim 91
Total Vulns
22
Fixable Vulns
91
Baseline (7/20/25)
Vulnerabilities by Fix State
Fixable (22)
Won't Fix (23)
Not Fixed (46)
Unknown (0)