Kovid Goyal

Missing ownership check on the shared memory object named by the kitty askpass escape code

Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer

Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell

Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop

Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory