WE
Product
weechat
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 2Low 0
Watch
Add weechat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-46613 | 9.8 | Nov 10 | WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list Affected: 0.1.6 before 4.4.2 |
| CVE-2020-9760 | 9.8 | Mar 23 | An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected) Affected: 0.3.4 before 2.7.1 |
| CVE-2020-8955 | 9.8 | Feb 12 | irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly… Affected: 0.3.8 through 2.7 |
| CVE-2021-40516 | 7.5 | Sep 5 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in… Affected: 0.4.1 before 3.2.1 |
| CVE-2017-8073 | 7.5 | Apr 23 | WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin Affected: before 1.7.1 |
| CVE-2026-53525 | 7.4 | Aug 21 | WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication Affected: >= 0.3.4, < 4.9.1 |
| CVE-2026-53524 | 6.5 | Aug 21 | WeeChat has a Decompression Bomb in Relay WebSocket (DoS) Affected: >= 4.3.0, < 4.9.1 |
| CVE-2022-28352 | 4.8 | Apr 2 | WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which… Affected: 3.2 before 3.4.1 |
Showing 8