Please do not report a vulnerability in a public issue.
Report it privately through GitHub: open this repository's Security tab and choose Report a vulnerability. Include what you found, how to reproduce it, and what it affects. We will reply in the advisory.
This covers owterminal.com, its API, and the ow host CLI.