Yara-x

Latest version: v0.13.0

Safety actively analyzes 707299 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

0.12.0

* The `macho` module now parses and exposes`LC_LINKER_OPTION` commands (256).
* Raise warning with some patterns that have too many 2-byte atoms and are potentially slow (264).
* Extract more information from the `SpcSpOpusInfo` structure contained in PE signatures (50180d8).
* BUGFIX: add missing `MEAN_BYTES` constant to `math` module (888c77e).
* BUGFIX: panic when calling `dylib_hash` in some corrupted Mach-O files (c014a26).

Contributors: latonis

0.11.1

* BUGFIX: large memory consumption while parsing corrupted PE files (f3ea4f3)

0.11.0

* Added JSON as a new output format (239).
* Added the `--profiling` option to the `scan` command (d3df07d).
* Implement loop-invariant code motion (hoisting) (246).
* Implement `sym_hash()` function for `macho` module (248).
* Allow larger jumps in hex patterns (1e6b6c7).
* BUGFIX: issue with undefined expression in `with` statements (5e2355a).

Contributors: chudicek latonis

0.10.0

* Add type information for the Python library (215).
* Reduce errors due large regexps (221).
* More improvements to `fmt` command (224, 4352ddc).
* Improved formatting for `pe` & `dotnet` modules (226).
* Raise warning when a hex pattern can be expressed as text (15db4b1).
* Implement `--recursive` option (6f45b2f).
* BUGFIX: Print paths relative to the target path for consistency with YARA (212).
* BUGFIX: Issues with `--print-strings` option (213, 214).

Contributors: latonis wxsBSD metthal

0.9.0

* Implement the `with` statement (197).
* The `fmt` command is now customizable (205).
* Serialize compiled rules in platform-independent way (202).
* Allow to specify namespaces for input rule files in the CLI (aa25903).
* Mach-O import parsing and import hash function by latonis in https://github.com/VirusTotal/yara-x/pull/135
* Refactor the deserialization API in Golang (e8bf6ed921).
* Redesign C API using callbacks (198).
* Implement APIs in C and Golang for accessing the individual rules contained in a `Rules` object (ef032524).
* BUGFIX: issue with some comments inside hex patterns (e7f63634).
* BUGFIX: bug while parsing regexp `/\\/` (09e823a).
* BUGFIX: panic when map, array or regexp is used as a boolean expression (5fb2057).
* BUGFIX: multiple issues in the parser with invalid rules (9c4231d, 699bf51, 28bf377, d19a323, 7e26d31, ba2059d, a2b7394).
* BUGFIX: bug while using `--compiled-rules` without namespaces (201).


Contributors: chudicek TommYDeeee latonis wxsBSD

0.8.0

* Implement command `fmt` for automatic YARA code formatting.
* Add `--module-data` option to `scan` command (183).
* Add `--ignore-module` option to `scan` and `compile` commands (0536024).
* Implement `cuckoo` module for backward compatibility with YARA (191).
* More warnings for potentially slow rules (38ddfb1, 1db2190).

Contributors: chudicek, qjerome

Page 1 of 2

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.