Joern's frontend family is growing and we welcome our newest member, Ghidra2cpg! It makes Joern the first code querying tool with binary support.   What can ghidra2cpg do for you, that other tools can't? Well, everything you are used to do with Joern but with

VLC 3.0.13 fixes a vulnerability that we identified automatically using joern-scan and reported a few weeks back. In particular, the following query that is part of joern-scan's default bundle pointed to the flaw. {val src = cpg.method(".*malloc$").callIn.where(_.argument(1)

What is Plume?Plume is a library which makes use of Soot to transform JVM bytecode into code property graphs. Given Java class files, the JVM bytecode is transformed into Soot's UnitGraph representation with call graphs constructed using either Class Hierarchy Analysis (CHA) or