Only the latest stable version of WeeChat is supported.

However, we may help backport fixes to older versions, especially when they are used in released distributions with no way to upgrade to the latest stable release (please contact us).

Please report security issues using the GitHub private vulnerability reporting form.

Alternatively, if you are not able to use this form, you can send an email to security@weechat.org instead.

The same process applies to vulnerabilities found in the development version (main branch).

Vulnerabilities in scripts must be reported privately to the script author, not here.

If you use AI tools to help you write your report, please read the AI policy first.

We will investigate all legitimate reports and do our best to quickly fix the problem.

Security vulnerabilities fixed in WeeChat are listed on weechat.org.