Report vulnerabilities privately via Security → Report a vulnerability, not in a public issue.

The image contains no secrets and no models; only open-source software and NVIDIA libraries pinned by version.