Vulnerability Reportnvidia/cuda:13.3.0-devel-ubuntu26.04

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The container exposes 1808 vulnerabilities, including 145 with severity 6.0 or higher, and the most severe (6.88) are XSS flaws in golang.org/x/net (CVE-2026-25681, CVE-2026-27136) and kernel use-after-free issues such as CVE-2026-31532 that require local access. In practice, the XSS issues only matter if the application parses and renders untrusted HTML, and the kernel flaws need a local attacker with the ability to trigger specific operations; the post-exploitation findings are all low severity. Limiting local access and avoiding exposure of untrusted input to HTML rendering can substantially reduce the real-world risk, but given the large attack surface, caution is warranted.