Weechat vulnerabilities

Products

• Weechat 8

Newest

• weechat WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication CVE-2026-53525 Fix available 7.4 HighAugust 9, 2026
• weechat WeeChat has a Decompression Bomb in Relay WebSocket (DoS) CVE-2026-53524 Fix available 6.5 MediumAugust 9, 2026
• weechat WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c... CVE-2024-46613 Fix available 9.8 CriticalNovember 10, 2024
• weechat WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify... CVE-2022-28352 Fix available 4.3 MediumApril 2, 2022
• weechat, debian linux +1 more WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted... CVE-2021-40516 Fix available 7.5 HighSeptember 5, 2021
• weechat, debian linux +1 more An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC... CVE-2020-9760 Fix available 9.8 CriticalMarch 23, 2020
• weechat, debian linux, fedoraproject fedora +2 more +4 more irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers... CVE-2020-8955 Fix available 9.8 CriticalFebruary 12, 2020
• weechat logger logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time... CVE-2017-14727 Fix available 7.5 HighSeptember 23, 2017
• weechat, debian linux +1 more WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This... CVE-2017-8073 Fix available 7.5 HighApril 23, 2017