← Back to scan
File as GitHub Issue repo: NationalSecurityAgency/ghidra

Push this scan report to NationalSecurityAgency/ghidra

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Missing import: `platform` used but not imported

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
CRIT MINED107 [MINED107] Missing import: `inspect` used but not imported: The file uses `inspect.someth… Ghidra/Extensions/Jython/jython-src/jin…:214
CRIT MINED107 [MINED107] Missing import: `time` used but not imported: The file uses `time.something(..… Ghidra/Debug/Debugger-rmi-trace/src/mai…:328
CRIT MINED107 [MINED107] Missing import: `time` used but not imported: The file uses `time.something(..… Ghidra/Debug/Debugger-agent-dbgeng/src/…:1127
CRIT MINED107 [MINED107] Missing import: `platform` used but not imported: The file uses `platform.some… Ghidra/Debug/Debugger-agent-drgn/src/ma…:63
CRIT MINED107 [MINED107] Missing import: `platform` used but not imported: The file uses `platform.some… Ghidra/Debug/Debugger-agent-lldb/src/ma…:163
CRIT MINED107 [MINED107] Missing import: `platform` used but not imported: The file uses `platform.some… Ghidra/Debug/Debugger-agent-lldb/src/ma…:207
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/9xx/loaders/x…:83
CRIT MINED107 [MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(..… GhidraBuild/IDAPro/Python/9xx/python/id…:2885
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/9xx/plugins/x…:87
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/9xx/plugins/x…:84
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/7xx/loaders/x…:88
CRIT MINED107 [MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(..… GhidraBuild/IDAPro/Python/7xx/python/id…:2829
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/7xx/plugins/x…:90
CRIT MINED107 [MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)… GhidraBuild/IDAPro/Python/7xx/plugins/x…:88
CRIT MINED022 [MINED022] C Strcpy: strcpy/strcat dont bounds-check; use strncpy or snprintf. GPL/DemanglerGnu/src/demangler_gnu_v2_4…:197
CRIT MINED022 [MINED022] C Strcpy: strcpy/strcat dont bounds-check; use strncpy or snprintf. GPL/DemanglerGnu/src/demangler_gnu_v2_2…:197
HIGH MINED106 [MINED106] Phantom test coverage: test_boilerplate: Test function `test_boilerplate` runs… Ghidra/Extensions/SleighDevTools/pcodet…:114
HIGH MINED106 [MINED106] Phantom test coverage: test_fi: Test function `test_fi` runs code but contains… Ghidra/Extensions/SleighDevTools/pcodet…:99
HIGH MINED106 [MINED106] Phantom test coverage: test_body: Test function `test_body` runs code but cont… Ghidra/Extensions/SleighDevTools/pcodet…:91
HIGH MINED106 [MINED106] Phantom test coverage: test_close_brace: Test function `test_close_brace` runs… Ghidra/Extensions/SleighDevTools/pcodet…:68
HIGH MINED106 [MINED106] Phantom test coverage: test_main: Test function `test_main` runs code but cont… Ghidra/Extensions/SleighDevTools/pcodet…:56
HIGH MINED106 [MINED106] Phantom test coverage: test_open_brace: Test function `test_open_brace` runs c… Ghidra/Extensions/SleighDevTools/pcodet…:53
HIGH MINED106 [MINED106] Phantom test coverage: test_endif: Test function `test_endif` runs code but co… Ghidra/Extensions/SleighDevTools/pcodet…:50
HIGH MINED106 [MINED106] Phantom test coverage: test_if: Test function `test_if` runs code but contains… Ghidra/Extensions/SleighDevTools/pcodet…:43
HIGH MINED106 [MINED106] Phantom test coverage: test_test: Test function `test_test` runs code but cont… Ghidra/Extensions/SleighDevTools/pcodet…:40
HIGH MINED106 [MINED106] Phantom test coverage: test_hdr: Test function `test_hdr` runs code but contai… Ghidra/Extensions/SleighDevTools/pcodet…:37
HIGH MINED108 [MINED108] `self.export_bookmarks` used but never assigned in __init__: Method `export_xm… GhidraBuild/IDAPro/Python/7xx/python/id…:326
HIGH MINED108 [MINED108] `self.export_comments` used but never assigned in __init__: Method `export_xml… GhidraBuild/IDAPro/Python/7xx/python/id…:325
HIGH MINED108 [MINED108] `self.export_data` used but never assigned in __init__: Method `export_xml` of… GhidraBuild/IDAPro/Python/7xx/python/id…:323
HIGH MINED108 [MINED108] `self.export_code` used but never assigned in __init__: Method `export_xml` of… GhidraBuild/IDAPro/Python/7xx/python/id…:321
HIGH MINED108 [MINED108] `self.export_register_values` used but never assigned in __init__: Method `exp… GhidraBuild/IDAPro/Python/7xx/python/id…:319
HIGH MINED108 [MINED108] `self.export_memory_map` used but never assigned in __init__: Method `export_x… GhidraBuild/IDAPro/Python/7xx/python/id…:317
HIGH MINED108 [MINED108] `self.export_datatypes` used but never assigned in __init__: Method `export_xm… GhidraBuild/IDAPro/Python/7xx/python/id…:314
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `export_xml` of cl… GhidraBuild/IDAPro/Python/7xx/python/id…:297
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `export_xml` of cl… GhidraBuild/IDAPro/Python/7xx/python/id…:291
HIGH MINED108 [MINED108] `self.display_summary` used but never assigned in __init__: Method `export_xml… GhidraBuild/IDAPro/Python/7xx/python/id…:343
HIGH MINED108 [MINED108] `self.display_cpu_time` used but never assigned in __init__: Method `export_xm… GhidraBuild/IDAPro/Python/7xx/python/id…:341
HIGH MINED108 [MINED108] `self.end_element` used but never assigned in __init__: Method `export_xml` of… GhidraBuild/IDAPro/Python/7xx/python/id…:338
HIGH MINED108 [MINED108] `self.export_program` used but never assigned in __init__: Method `export_xml`… GhidraBuild/IDAPro/Python/7xx/python/id…:308
HIGH MINED108 [MINED108] `self.write_xml_declaration` used but never assigned in __init__: Method `expo… GhidraBuild/IDAPro/Python/7xx/python/id…:307
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `export_xml` of cl… GhidraBuild/IDAPro/Python/7xx/python/id…:299
HIGH MINED108 [MINED108] `self.open_file` used but never assigned in __init__: Method `export_xml` of c… GhidraBuild/IDAPro/Python/7xx/python/id…:299
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `export_xml` of cl… GhidraBuild/IDAPro/Python/7xx/python/id…:294
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `export_xml` of cl… GhidraBuild/IDAPro/Python/7xx/python/id…:292
HIGH MINED108 [MINED108] `self.autorun` used but never assigned in __init__: Method `export_xml` of cla… GhidraBuild/IDAPro/Python/7xx/python/id…:290
HIGH MINED108 [MINED108] `self.get_options` used but never assigned in __init__: Method `export_xml` of… GhidraBuild/IDAPro/Python/7xx/python/id…:288
HIGH MINED108 [MINED108] `self.check_and_load_decompiler` used but never assigned in __init__: Method `… GhidraBuild/IDAPro/Python/7xx/python/id…:286
HIGH MINED108 [MINED108] `self.display_version` used but never assigned in __init__: Method `export_xml… GhidraBuild/IDAPro/Python/7xx/python/id…:285
HIGH MINED108 [MINED108] `self.xmlfile` used but never assigned in __init__: Method `export_xml` of cla… GhidraBuild/IDAPro/Python/7xx/python/id…:299
HIGH MINED108 [MINED108] `self.filename` used but never assigned in __init__: Method `display_summary` … GhidraBuild/IDAPro/Python/7xx/python/id…:164
HIGH MINED108 [MINED108] `self.close_xmlfile` used but never assigned in __init__: Method `cleanup` of … GhidraBuild/IDAPro/Python/7xx/python/id…:122
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). Ghidra/Features/BSim/ghidra_scripts/Que…:305
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). Ghidra/Features/BSim/ghidra_scripts/Gen…:29
HIGH MINED004 [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums). Ghidra/Features/BSim/ghidra_scripts/Gen…:38
HIGH MINED036 [MINED036] Python Os System Call: os.system() invokes shell with no escaping. Ghidra/Extensions/SleighDevTools/pcodet…:42
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… Ghidra/Features/BSim/ghidra_scripts/Com…:59
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… Ghidra/Features/BSim/ghidra_scripts/Add…:113
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… Ghidra/Debug/Debugger/src/main/java/ghi…:40
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … Ghidra/Debug/Debugger/src/main/java/ghi…:176
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … Ghidra/Debug/Debugger/src/main/java/ghi…:75
HIGH SEC128 [SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call … Ghidra/Debug/Debugger-agent-gdb/src/mai…:53
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… Ghidra/Debug/Debugger-agent-x64dbg/data…:45
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… Ghidra/Debug/Debugger-agent-dbgeng/data…:48
HIGH MINED001 [MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e… Ghidra/Debug/Debugger-agent-dbgeng/data…:49
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… Ghidra/Debug/Debugger-agent-dbgeng/data…:64
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… Ghidra/Debug/Debugger-agent-dbgeng/data…:75
HIGH MINED006 [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste… Ghidra/Debug/Debugger-agent-dbgeng/data…:58
HIGH COMP001 [COMP001] High cognitive complexity: Function `get_arch` has cognitive complexity 30 (Son… Ghidra/Debug/Debugger-agent-dbgeng/src/…:67
HIGH DKR014 Dockerfile copies the entire context without .dockerignore docker/Dockerfile:44
HIGH MINED134 [MINED134] Binary file `Ghidra/RuntimeScripts/Common/support/gradle/gradle-wrapper.jar` c… Ghidra/RuntimeScripts/Common/support/gr…:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_64/llio_i386.dll` committed in source rep… GPL/DMG/data/os/win_x86_64/llio_i386.dll:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_64/llio_ia64.dll` committed in source rep… GPL/DMG/data/os/win_x86_64/llio_ia64.dll:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_64/llio_amd64.dll` committed in source re… GPL/DMG/data/os/win_x86_64/llio_amd64.d…:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_32/llio_i386.dll` committed in source rep… GPL/DMG/data/os/win_x86_32/llio_i386.dll:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_32/llio_ia64.dll` committed in source rep… GPL/DMG/data/os/win_x86_32/llio_ia64.dll:1
HIGH MINED134 [MINED134] Binary file `GPL/DMG/data/os/win_x86_32/llio_amd64.dll` committed in source re… GPL/DMG/data/os/win_x86_32/llio_amd64.d…:1
HIGH MINED134 [MINED134] Binary file `GhidraDocs/GhidraClass/ExerciseFiles/WinhelloCPP/WinHelloCPP.exe`… GhidraDocs/GhidraClass/ExerciseFiles/Wi…:1
HIGH MINED134 [MINED134] Binary file `GhidraDocs/GhidraClass/ExerciseFiles/VersionTracking/WallaceSrc.e… GhidraDocs/GhidraClass/ExerciseFiles/Ve…:1
HIGH MINED134 [MINED134] Binary file `GhidraDocs/GhidraClass/ExerciseFiles/VersionTracking/WallaceVersi… GhidraDocs/GhidraClass/ExerciseFiles/Ve…:1
HIGH MINED134 [MINED134] Binary file `GhidraDocs/GhidraClass/ExerciseFiles/Advanced/globalRegVars.so` c… GhidraDocs/GhidraClass/ExerciseFiles/Ad…:1
HIGH MINED134 [MINED134] Binary file `GhidraDocs/GhidraClass/ExerciseFiles/Advanced/override.so` commit… GhidraDocs/GhidraClass/ExerciseFiles/Ad…:1
HIGH MINED115 [MINED115] Action `gradle/actions/dependency-submission` pinned to mutable ref `@v6`: `us… .github/workflows/dependency-submission…:28
HIGH MINED115 [MINED115] Action `actions/setup-java` pinned to mutable ref `@v5`: `uses: actions/setup-… .github/workflows/dependency-submission…:19
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/dependency-submission…:16
HIGH MINED115 [MINED115] Action `actions/setup-java` pinned to mutable ref `@v5`: `uses: actions/setup-… .github/workflows/build-ghidra.yml:19
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/build-ghidra.yml:13
HIGH MINED118 [MINED118] Dockerfile FROM `alpine:3.20` not pinned by digest: `FROM alpine:3.20` resolve… docker/Dockerfile:8
HIGH SEC004 [SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection. Ghidra/Debug/Debugger-agent-gdb/data/sc…:85
MED MINED109 [MINED109] Mutable default argument in `ghidra_script` (list): `def ghidra_script(... = [… Ghidra/Features/PyGhidra/src/main/py/sr…:198
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:329
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:322
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:95
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:91
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:274
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:259
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… Ghidra/Debug/Debugger-agent-lldb/src/ma…:681
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/loaders/x…:94
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:673
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:458
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:3066
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:2732
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:2618
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/python/id…:2531
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/plugins/x…:81
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/9xx/plugins/x…:78
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/loaders/x…:99
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:598
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:380
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:3010
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:2676
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:2557
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/python/id…:2469
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/plugins/x…:85
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… GhidraBuild/IDAPro/Python/7xx/plugins/x…:82
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… Ghidra/Features/Base/ghidra_scripts/Rec…:27
MED SEC115 [SEC115] Decompression without size cap (zip/gzip bomb): Decompressing untrusted archives… Ghidra/Debug/Framework-TraceModeling/sr…:161
MED SEC136 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all excepti… Ghidra/Debug/Debugger-agent-x64dbg/src/…:79
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … Ghidra/Extensions/Lisa/src/main/java/gh…:268
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … Ghidra/Extensions/Jython/jython-src/jin…:64
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … Ghidra/Debug/Debugger-agent-x64dbg/src/…:76
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… Ghidra/Debug/Debugger-agent-x64dbg/data…:45
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… Ghidra/Debug/Debugger-agent-dbgeng/data…:48
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… Ghidra/Debug/Debugger-agent-dbgeng/data…:49
MED SEC012 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation all… GPL/DMG/src/dmg/java/mobiledevices/dmg/…:98
MED SEC012 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation all… GPL/DMG/src/dmg/java/mobiledevices/dmg/…:49
MED SEC012 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation all… GPL/DMG/src/dmg/java/mobiledevices/dmg/…:206
MED AUC001 [AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks… —
MED DKR007 Docker build context has no .dockerignore .dockerignore
MED DKR015 Docker build context is very large .dockerignore
MED AIC001 Parallel implementation file sits beside a canonical file Ghidra/Features/FileFormats/src/main/ja…:1
MED AIC004 Suspicious implementation file appears unreferenced Ghidra/Features/FileFormats/src/main/ja…:1
MED AIC004 Suspicious implementation file appears unreferenced Ghidra/Features/FileFormats/src/main/ja…:1
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… Ghidra/Debug/Debugger/src/main/java/ghi…:142
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… Ghidra/Debug/Debugger/src/main/java/ghi…:281
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… GPL/DMG/src/dmg/java/mobiledevices/dmg/…:106
LOW COMP001 [COMP001] High cognitive complexity: Function `put_regions_exdi` has cognitive complexity… Ghidra/Debug/Debugger-agent-dbgeng/src/…:135
LOW COMP001 [COMP001] High cognitive complexity: Function `GetOffspring` has cognitive complexity 12 … Ghidra/Debug/Debugger-agent-dbgeng/src/…:322
LOW AIC003 Duplicated implementation block across source files Ghidra/Debug/Debugger-agent-dbgeng/data…:35
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:5
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:3
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:1
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:4
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:1
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:3
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:3
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:5
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:1
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:5
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_4…:1
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_2…:3
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_2…:2
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_2…:5
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_2…:4
LOW AIC003 Duplicated implementation block across source files GPL/DemanglerGnu/src/demangler_gnu_v2_2…:3
LOW AIC003 Duplicated implementation block across source files GPL/DMG/src/dmg/java/mobiledevices/dmg/…:35
LOW DKR012 Dockerfile keeps pip download cache docker/Dockerfile:47
LOW DKR012 Dockerfile keeps pip download cache docker/Dockerfile:25
LOW AIC002 Source file name looks like an AI patch artifact Ghidra/Features/FileFormats/src/main/ja…:1
INFO MINED085 [MINED085] Java Systemexit: System.exit() inside a library kills the whole JVM. Ghidra/Features/Base/src/main/java/ghid…:227
INFO MINED085 [MINED085] Java Systemexit: System.exit() inside a library kills the whole JVM. Ghidra/Features/Base/src/main/java/ghid…:47
INFO MINED085 [MINED085] Java Systemexit: System.exit() inside a library kills the whole JVM. Ghidra/Features/BSim/src/main/java/ghid…:46
INFO MINED093 [MINED093] Java Sql Statement Concat: Statement.executeQuery with concat string = SQL inj… Ghidra/Features/BSim/src/main/java/ghid…:67
INFO MINED057 [MINED057] Todo Bomb: Code path with a TODO/FIXME/HACK comment that gates correctness — l… Ghidra/Features/Base/ghidra_scripts/Get…:91
INFO MINED057 [MINED057] Todo Bomb: Code path with a TODO/FIXME/HACK comment that gates correctness — l… Ghidra/Extensions/SymbolicSummaryZ3/src…:92
INFO MINED077 [MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles. Ghidra/Extensions/SleighDevTools/pcodet…:46
INFO MINED064 [MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services. Ghidra/Debug/Debugger-rmi-trace/src/mai…:78
INFO MINED083 [MINED083] Java Thread Start: Raw thread creation. Should use ExecutorService for managed… Ghidra/Features/BSim/src/main/java/ghid…:84
INFO MINED083 [MINED083] Java Thread Start: Raw thread creation. Should use ExecutorService for managed… Ghidra/Debug/Debugger-rmi-trace/src/mai…:36
INFO MINED083 [MINED083] Java Thread Start: Raw thread creation. Should use ExecutorService for managed… Ghidra/Debug/Debugger-jpda/src/main/jav…:78
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. Ghidra/Features/Base/ghidra_scripts/Rec…:108
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. Ghidra/Debug/Debugger-agent-x64dbg/src/…:39
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. Ghidra/Debug/Debugger-agent-dbgeng/src/…:43
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… Ghidra/Debug/Debugger-agent-dbgeng/src/…:151
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… Ghidra/Debug/Debugger-agent-dbgeng/data…:49
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… Ghidra/Debug/Debugger-agent-dbgeng/data…:50
INFO MINED075 [MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking fo… GPL/DemanglerGnu/src/demangler_gnu_v2_4…:60
INFO MINED081 [MINED081] Java Printstacktrace: Should use logger, not stack trace to stderr. Ghidra/Debug/Framework-TraceModeling/sr…:132
INFO MINED081 [MINED081] Java Printstacktrace: Should use logger, not stack trace to stderr. Ghidra/Debug/Debugger/src/main/java/ghi…:65
INFO MINED081 [MINED081] Java Printstacktrace: Should use logger, not stack trace to stderr. GPL/DMG/src/dmg/java/mobiledevices/dmg/…:197
Reset to top 5 191 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `NationalSecurityAgency/ghidra`

**Score: 70/100 (B-)**  ·  197 findings  ·  scanned 2026-05-20 14:06 UTC  ·  2,831,947 LOC

| Severity | Count |
|---|---|
| CRITICAL | 16 |
| HIGH | 72 |
| MEDIUM | 44 |
| LOW | 38 |

📊 [Full filterable report](https://repobility.com/scan/34e46ccb-bf4c-4ece-bf6e-ec37bc5f04cd/)  ·  ![scorecard](https://repobility.com/scan/34e46ccb-bf4c-4ece-bf6e-ec37bc5f04cd/report.png?v=1779285999-s2)

### Top findings

1. **CRITICAL** `MINED107` — Missing import: `inspect` used but not imported
   `Ghidra/Extensions/Jython/jython-src/jintrospect.py:214` · ✓ Repobility
2. **CRITICAL** `MINED107` — Missing import: `time` used but not imported
   `Ghidra/Debug/Debugger-rmi-trace/src/main/py/src/ghidratrace/client.py:328` · ✓ Repobility
3. **CRITICAL** `MINED107` — Missing import: `time` used but not imported
   `Ghidra/Debug/Debugger-agent-dbgeng/src/main/py/src/ghidradbg/util.py:1127` · ✓ Repobility
4. **CRITICAL** `MINED107` — Missing import: `platform` used but not imported
   `Ghidra/Debug/Debugger-agent-drgn/src/main/py/src/ghidradrgn/arch.py:63` · ✓ Repobility
5. **CRITICAL** `MINED107` — Missing import: `platform` used but not imported
   `Ghidra/Debug/Debugger-agent-lldb/src/main/py/src/ghidralldb/arch.py:163` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/34e46ccb-bf4c-4ece-bf6e-ec37bc5f04cd/_
Already filed
This repo publishes a SECURITY.md policy and the scan contains 7 Critical/High security finding(s). Public issue filing would violate coordinated disclosure. Submit privately via the project's security reporting channel.
Megaproject â high spam risk
Could not determine 'NationalSecurityAgency/ghidra' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.