See how sam lantinga compares to other vendors in security performance
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
Buffer overflow in Linux splitvt command gives root access to local users.