WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-40516.json"