When reporting a security issue, do not create an issue or file a pull request. Instead, disclose the issue responsibly by sending an email to psirtnvidia.com.