# pcre2 10.47

PCRE2 development is based here.

Snapshot of gominimal/pkgs commit `02e5f823e4b55b925a4db249e262e7b4f73a96e3` (pushed 2026-07-29T21:20:39.000Z).

## Install

```sh
min add pcre2
```

## Direct advisories

| ID | Severity | CVSS | Fix status | Fixed version | Summary |
| --- | --- | --- | --- | --- | --- |
| GHSA-q7rw-r7qq-2hx6 | UNKNOWN | — | unknown_fix | — | pcre2_serialize_encode() information disclosure |
| OSV-2026-343 | HIGH | — | unfixed_by_design | — | Heap-buffer-overflow in pcre2_compile_32 |

## Transitive advisories

2 advisories inherited through runtime dependencies:

- CVE-2026-5435 (HIGH) via glibc
- CVE-2026-6238 (MEDIUM) via glibc

## Dependencies

- Build (18): bash-bootstrap, bzip2, coreutils, diffutils, file, findutils, gawk-bootstrap, grep, gzip, make, perl, sed, tar, xz, binutils, gcc, linux_headers, zlib
- Runtime (1): glibc

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 96 | good |
| advisories | 25 | low |
| quality | 73 | mid |
| maintenance | 95 | good |
| licence | 90 | good |

## Links

- Homepage: https://pcre2project.github.io/pcre2/
- Package page (HTML): https://minimal.dev/pkgs/pcre2
- JSON API (floats latest): https://minimal.dev/api/pkgs/pcre2.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/pcre2/sbom.json