This page lists all known and fixed security vulnerabilities in stable releases.
The security vulnerabilities introduced during development of a version and fixed before a stable release are not mentioned.
WeeChat Security Advisories (WSA) are sent to this mailing list, as soon as they are made public:
weechat-security
To report a security issue, please DO NOT file an issue on GitHub, but send an email to security@weechat.org instead.