Can Mend Detect Vulnerabilities in OS packages (RPM, DEB, etc.) within Docker Images?

Yes, the Mend CLI can be used to scan your container images, to gather vulnerability information for the base OS and application layers. For the relevant configuration page, see Scanning Container Images.