What is "ghidra"?

No description available.

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add ghidra

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["ghidra"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build ghidra
min add --runtime ghidra

Compare versions

to

Dependencies (9)

Dependencies
Name	Version	Kind
base	—	build
bash	5.3	runtime
gcc	15.2.0	runtime
glibc	2.44	runtime
jdk	21.0.12.1	runtime
make	4.4.1	build
python CVE:3	3.14.8	build
toolchain	—	build
zlib	1.3.2	runtime

Dependency changes

No dependants

No other packages in the registry depend on this one.

ghidra v12.1.4bf93cf1
Diff
Lines:+3 / -3Deps:9(+1)CVE:4
Released: 17 days ago
ghidra v12.1.336713af
Diff
Lines:+3 / -3Deps:8
Released: 2 months ago
ghidra v12.1.26239f1d
Diff
Lines:+756Deps:8(+8)
Released: 2 months ago

Showing 4 advisories

Security advisories for this package
	Status	IDs	Package	Version	Severity	Published
Critical (0)
High (1)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-100504	ghidra	12.1.2 – 12.1.4	High	17 days ago
Summary Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 Affected ranges 12.1.2 – 12.1.4 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-100504.json, https://nvd.nist.gov/vuln/detail/CVE-2026-100504, https://www.vulncheck.com/advisories/ghidra-through-12.1.4-stack-based-buffer-overflow-via-leftshift128 Fix: https://github.com/NationalSecurityAgency/ghidra/commit/6babe3c1cec7f5ec920dd16cdc86a02893e5b33c PACKAGE: https://github.com/NationalSecurityAgency/ghidra ARTICLE: https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/multiprecision.cc#L29-L61, https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/ruleaction.cc#L7848-L7878
Medium (3)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-100505	ghidra	12.1.2 – 12.1.4	Medium	17 days ago
Summary Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager Affected ranges 12.1.2 – 12.1.4 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-100505.json, https://nvd.nist.gov/vuln/detail/CVE-2026-100505, https://www.vulncheck.com/advisories/ghidra-11.2-through-12.1.4-heap-out-of-bounds-read-via-stringmanager Fix: https://github.com/NationalSecurityAgency/ghidra/commit/e37c57f3d9c29511a1860f0a735df53131d403d7 PACKAGE: https://github.com/NationalSecurityAgency/ghidra ARTICLE: https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/stringmanage.cc#L324-L410
	Under investigation	CVE-2026-100503	ghidra	12.1.2 – 12.1.4	Medium	17 days ago
Summary Ghidra through 12.1.4 Heap Use-After-Free in Decompiler Affected ranges 12.1.2 – 12.1.4 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-100503.json, https://nvd.nist.gov/vuln/detail/CVE-2026-100503, https://www.vulncheck.com/advisories/ghidra-through-12.1.4-heap-use-after-free-in-decompiler Fix: https://github.com/NationalSecurityAgency/ghidra/commit/5ef1ee4d7a25a65db195f3a70f681ca74440be61 PACKAGE: https://github.com/NationalSecurityAgency/ghidra ARTICLE: https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/merge.cc#L462-L472, https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/subflow.cc#L2717-L2745
	Under investigation	GHSA-8pr2-46mf-v2r2 CVE-2026-52756	ghidra	12.1.2 – 12.1.4	Medium	4 months ago
Summary Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server Affected ranges 12.1.2 – 12.1.4 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52756.json, https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-8pr2-46mf-v2r2, https://nvd.nist.gov/vuln/detail/CVE-2026-52756, https://www.vulncheck.com/advisories/ghidra-unauthenticated-path-traversal-in-debugger-isf-server PACKAGE: https://github.com/nationalsecurityagency/ghidra
Low (0)
	Status	IDs	Package	Version	Severity	Published
Unknown (0)
	Status	IDs	Package	Version	Severity	Published

Build provenance

For the signed record of what the build used, see the Provenance tab.

48 components

Software Bill of Materials — every package this build depends on
Packages	Version	Repository	License
ghidraROOT	12.1.4	https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_12.1.4_build/ghidra_12.1.4_PUBLIC_20260921.zip	Apache-2.0
acl	2.4.0	https://storage.googleapis.com/minimal-staging-archives/acl-2.4.0.tar.xzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
alsa-lib	1.2.16.1	https://storage.googleapis.com/minimal-staging-archives/alsa-lib-1.2.16.1.tar.bz2MIRROR	LGPL-2.1-only
attr	2.6.0	https://storage.googleapis.com/minimal-staging-archives/attr-2.6.0.tar.gzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
bash	5.3	www.gnu.org/software/bash	GPL-3.0-only
bash-bootstrap	5.3	www.gnu.org/software/bash	GPL-3.0-only
binutils	2.47	www.gnu.org/software/binutils	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.0-only)
bison	3.8.2	www.gnu.org/software/bison	GPL-3.0-only
bzip2	1.0.8	github.com/libarchive/bzip2	bzip2-1.0.6
coreutils	9.12	www.gnu.org/software/coreutils	GPL-3.0-only
diffutils	3.12	www.gnu.org/software/diffutils	GPL-3.0-only
expat	2.8.5	github.com/libexpat/libexpat	MIT
file	5.48	https://storage.googleapis.com/minimal-staging-archives/file-5.48.tar.gzMIRROR	BSD-2-Clause-Darwin
findutils	4.11.0	www.gnu.org/software/findutils	GPL-3.0-only
flex	2.6.4	github.com/westes/flex	BSD-3-Clause-flex
gawk	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gawk-bootstrap	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gcc	15.2.0	www.gnu.org/software/gcc	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
gdbm	1.26	www.gnu.org/software/gdbm	GPL-3.0-only
glibc	2.44	www.gnu.org/software/glibc	(GPL-2.0-only AND LGPL-2.1-only)
gmp	6.3.0	www.gnu.org/software/gmp	LGPL-3.0-or-later OR GPL-2.0-or-later
grep	3.12	www.gnu.org/software/grep	GPL-3.0-only
gzip	1.15	www.gnu.org/software/gzip	GPL-3.0-only
jdk	21.0.12.1	github.com/adoptium/temurin21-binaries	GPL-2.0-only WITH Classpath-exception-2.0
libcap	2.78	https://storage.googleapis.com/minimal-staging-archives/libcap-2.78.tar.xzMIRROR	BSD-3-Clause OR GPL-2.0-only
libffi	3.8.0	github.com/libffi/libffi	MIT
linux_headers	6.12.43	github.com/torvalds/linux	GPL-2.0-only WITH Linux-syscall-note
lz4	1.10.0	github.com/lz4/lz4	BSD-2-Clause AND GPL-2.0-or-later
m4	1.4.21	www.gnu.org/software/m4	GPL-3.0-only
make	4.4.1	www.gnu.org/software/make	GPL-3.0-only
mpc	1.4.1	www.gnu.org/software/mpc	LGPL-3.0-or-later
mpfr	4.2.2	www.gnu.org/software/mpfr	GPL-3.0-only
ncurses	6.6	www.gnu.org/software/ncurses	X11-distribute-modifications-variant
openssl	3.6.5	github.com/openssl/openssl	Apache-2.0
patch	2.8	www.gnu.org/software/patch	GPL-3.0-only
pcre2	10.49	github.com/PCRE2Project/pcre2	BSD-3-Clause WITH PCRE2-exception
perl	5.44.0	github.com/Perl/perl5	Artistic-1.0-Perl OR GPL-1.0-or-later
pkgconf	3.0.5	github.com/pkgconf/pkgconf	ISC
python	3.14.8	github.com/python/cpython	Python-2.0.1
readline	8.3	www.gnu.org/software/readline	GPL-3.0-only
sed	4.10	www.gnu.org/software/sed	GPL-3.0-only
sqlite	3.53.4	github.com/sqlite/sqlite	blessing
tar	1.35	www.gnu.org/software/tar	GPL-3.0-only
tzdata	2026e	github.com/eggert/tz	LicenseRef-Public-Domain
util-linux	2.42.4	github.com/util-linux/util-linux	GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause
xz	5.8.4	github.com/tukaani-project/xz	(0BSD AND GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
zlib	1.3.2	github.com/madler/zlib	Zlib
zstd	1.5.7	github.com/facebook/zstd	BSD-3-Clause OR GPL-2.0-only

View packages at a commit

ghidra

Install package

OpenSSF Score

OpenSSF Scorecard — ghidra

What is "ghidra"?

How to use this package

Quick install

Declare as a task dependency in minimal.toml

Build-time vs runtime

Dependencies (9)

Dependency changes

Summary

Affected ranges

References

Summary

Affected ranges

References

Summary

Affected ranges

References

Summary

Affected ranges

References

Build provenance

Build provenance

Build provenance

48 components

Join the waitlist

Check your email