Privately reporting a Vulnerability to NVIDIA/NeMo 
This issue is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. The report has been submitted in private : https://github.com/NVIDIA/NeMo/security/advisories/GHSA-x392-p65g-4rxx This issue is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. Well, it is not in a stale state. But rather I've been waiting for a CVE to be assigned and the report to be published.
Hey , 

I have identified a vulnerability in the latest codebase NVIDIA/NeMo. 
Could you please enable the GitHub feature for [private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository), or in case NVIDIA Corporation has a bug bounty program in HackerOne platform for instance, I would like to report that.

Thank you  
@sim4n6