Ghostty 1.4.0 released with full Kitty graphics support and five security fixes
Ghostty's 1.4.0 release delivers performance and memory improvements, a complete Kitty graphics protocol implementation including animation, and SSH integration upgrades, built from 2,889 commits by 172 contributors over seven months. The maintainers also disclosed and patched five security vulnerabilities, including paste-protection and tmux control mode crashes affecting versions 1.3.0 and 1.3.1.
GoKawiil's interpretation of the reporting above, not reported fact.
The complete Kitty graphics implementation reportedly makes Ghostty the first non-Kitty terminal to support animation and relative placements, which could pressure other terminal emulators to match feature parity. The disclosed vulnerabilities, several triggerable just by displaying malicious output, suggest terminal emulators remain an underappreciated attack surface that users should patch promptly.
- Ghostty 1.4.0 adds full Kitty graphics protocol support, including animation and relative placements.
- The release fixes five security vulnerabilities, some exploitable merely by displaying malicious terminal output.
- The update reflects seven months of work from 172 contributors across 2,889 commits.
Source: ghostty.org, 2026-10-27
Published there as: “Ghostty 1.4.0”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.