Image reports › gcr.io/distroless/base-debian12
gcr.io/distroless/base-debian12 — vulnerabilities, FIPS 140-3 and fixes
gcr.io/distroless/base-debian12 · Distroless
Latest: gcr.io/distroless/base-debian12:latest · checked 2026-09-25
Not FIPS-ready
No. base-debian12:latest relies on cryptography that isn't FIPS-certified, so it can't be used where FIPS 140-3 is required as it stands.
Security: 3 known vulnerabilities
3 known vulnerabilities in 2 packages (1 critical); none has a fix available yet.
Critical, high and exploited vulnerabilities in latest
| Severity | ID | Package | Fixed in | Summary |
|---|---|---|---|---|
| critical | CVE-2024-5535 | libssl3 3.0.20-1~deb12u2 | no fix yet | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an |
All checked tags
| Tag | FIPS | Known vulnerabilities | Checked | |
|---|---|---|---|---|
| latest | Not FIPS-ready | A 3 1 critical | 2026-09-25 | Full report |