go-fips | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

90% CIS Docker compliance 80% NIST compliance FIPS 140-3 validated 100% STIG compliance

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/go-fips:latest

vs.

Public Image

https://hub.docker.com/layers/library/golang/latest

Detailed Vulnerability Comparison

Daily report prepared August 24, 2026 at 3:49 AM

Minimus image (1)Public image (231)

CVE	severity	Affected Packages
CVE-2026-9079	critical	curl libcurl3t64-gnutls +1
CVE-2026-8927	critical	curl libcurl3t64-gnutls +1
CVE-2026-8926	critical	curl libcurl3t64-gnutls +1
CVE-2026-8924	critical	curl libcurl3t64-gnutls +1

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image

62 total packages

62 combined OS and application packages

Public Image

209 total packages

2 packages in additional layers

207 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared August 24, 2026 at 3:49 AM

Minimus image (62)Public image (209)

Package	version	license	type	Total Vulnerabilities
libc6	2.41-12+deb13u3	BSD-2-clause AND BSD-3-clause-Berkeley AND BSD-3-clause-Carnegie AND BSD-3-clause-Oracle AND BSD-3-clause-WIDE AND BSD-like-Spencer AND BSL-1.0 AND CORE-MATH AND Carnegie AND DEC AND FSFAP AND GPL-2 AND GPL-2+ AND GPL-2+-with-link-exception AND GPL-3 AND GPL-3+ AND IBM AND ISC AND Inner-Net AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-2.1+-with-link-exception AND LGPL-3 AND LGPL-3+ AND MIT-like-Lord AND PCRE AND SunPro AND Unicode-DFS-2016 AND Univ-Coimbra AND public-domain	deb	13
libc6-dev	2.41-12+deb13u3	BSD-2-clause AND BSD-3-clause-Berkeley AND BSD-3-clause-Carnegie AND BSD-3-clause-Oracle AND BSD-3-clause-WIDE AND BSD-like-Spencer AND BSL-1.0 AND CORE-MATH AND Carnegie AND DEC AND FSFAP AND GPL-2 AND GPL-2+ AND GPL-2+-with-link-exception AND GPL-3 AND GPL-3+ AND IBM AND ISC AND Inner-Net AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-2.1+-with-link-exception AND LGPL-3 AND LGPL-3+ AND MIT-like-Lord AND PCRE AND SunPro AND Unicode-DFS-2016 AND Univ-Coimbra AND public-domain	deb	13
libc-bin	2.41-12+deb13u3	BSD-2-clause AND BSD-3-clause-Berkeley AND BSD-3-clause-Carnegie AND BSD-3-clause-Oracle AND BSD-3-clause-WIDE AND BSD-like-Spencer AND BSL-1.0 AND CORE-MATH AND Carnegie AND DEC AND FSFAP AND GPL-2 AND GPL-2+ AND GPL-2+-with-link-exception AND GPL-3 AND GPL-3+ AND IBM AND ISC AND Inner-Net AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-2.1+-with-link-exception AND LGPL-3 AND LGPL-3+ AND MIT-like-Lord AND PCRE AND SunPro AND Unicode-DFS-2016 AND Univ-Coimbra AND public-domain	deb	13
libc-dev-bin	2.41-12+deb13u3	BSD-2-clause AND BSD-3-clause-Berkeley AND BSD-3-clause-Carnegie AND BSD-3-clause-Oracle AND BSD-3-clause-WIDE AND BSD-like-Spencer AND BSL-1.0 AND CORE-MATH AND Carnegie AND DEC AND FSFAP AND GPL-2 AND GPL-2+ AND GPL-2+-with-link-exception AND GPL-3 AND GPL-3+ AND IBM AND ISC AND Inner-Net AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-2.1+-with-link-exception AND LGPL-3 AND LGPL-3+ AND MIT-like-Lord AND PCRE AND SunPro AND Unicode-DFS-2016 AND Univ-Coimbra AND public-domain	deb	13
bsdutils	1:2.41-5	BSD-2-clause AND BSD-3-clause AND BSD-4-clause AND BSLA AND Expat AND GPL-2 AND GPL-2+ AND GPL-3 AND GPL-3+ AND ISC AND LGPL AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-3 AND LGPL-3+ AND public-domain	deb	9