Instead, please submit a private vulnerability report, see below.

1. NVIDIA Vulnerability Disclosure Program (preferred) Submit through the NVIDIA Product Security Incident Response Team (PSIRT) web form (https://www.nvidia.com/en-us/security/report-vulnerability/) This is the fastest path to triage and tracking.

2. Email NVIDIA PSIRT psirt@nvidia.com — encrypt sensitive reports with the NVIDIA PSIRT PGP key.

3. GitHub Private Vulnerability Reporting Use the Security and quality tab on this repository → Report a vulnerability.

We prefer all communications to be in English.

Reports should include the following:

• reproducible example showing how the vulnerability can be exploited
• statement about the impact (including affected versions)

And we'd appreciate if they also include:

• statement about whether you are interested in implementing the fix yourself

NVIDIA PSIRT will acknowledge receipt and coordinate triage, fix development, and coordinated disclosure.

More on NVIDIA's response process: https://www.nvidia.com/en-us/security/psirt-policies/.