Yes it does:<p>&gt; For now, Clair uses three databases, one for each supported operating system: Ubuntu CVE Tracker, Debian Security Bug Tracker, Red Hat Security Data<p><a href="https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;clair&#x2F;blob&#x2F;master&#x2F;README.md#detectors--fetchers" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;clair&#x2F;blob&#x2F;master&#x2F;README.md#detect...</a>