All tools / Reverse engineering
JADX
Repository description, written by its ownerDex to Java decompiler
Active last commit 5 days ago
Commits in 45 of the last 52 weeks
- Latest release has downloads without a signature or checksum file
- Category
- Reverse engineering
- Subcategory
- Java Decompilers
- License
- Apache-2.0
- Latest release
- Release v1.5.6, Jul 10, 2026 (no signature or checksum file)
- Stars
- 51.1K
- GitHub repository id
- 8859474
- Listed in
- awesome-cyber-security-tools (CC0-1.0)
- Last checked
- Oct 19, 2026
Security advisories
Advisories the maintainers published on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.
- GHSA-gpvc-ccw7-744v CVE-2026-54684 High Jul 10, 2026
XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run - GHSA-jwv3-q635-w9m4 CVE-2026-42447 Low Jul 10, 2026
HTML Injection in Summary panel - GHSA-w6f5-h4x4-rfpj CVE-2026-42049 Medium Jul 10, 2026
RCE Via Groovy Code Injection in Gradle Export - GHSA-3pp3-hg2q-9gpm CVE-2024-32653 Medium Apr 22, 2024
Insufficient input filtering of "package name" allows command execution in the device with shell privileges - GHSA-hvp5-5x4f-33fq Low Apr 22, 2024
jadx-gui file override - GHSA-3r7j-8mqh-6qhx CVE-2022-39259 Medium Oct 20, 2022
Jadx-gui: Swing HTML DOS attack - GHSA-fjh6-p566-wr6q CVE-2021-22569 Medium Jul 20, 2022
Vulnerable library protobuf-java 3.11.4
Changes seen by hackshelf
- Oct 19, 2026 First checked, status Active