Weechat vulnerabilities
We track 2 vulnerabilities in Weechat products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Weechat vulnerabilities
- 7.4 High severity
weechat: Observable Timing Discrepancy
WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext pass
- 9.8 Critical severity
weechat: Integer Overflow or Wraparound
WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_t