SECURITY: escape cat name (PR #14157)

GitHub