Path traversal in rio-vt Kitty graphics protocol handler allows out-of-bounds file delete (and read)

gitoxide-core does not neutralize special characters for terminals