# upx 5.2.0

UPX - the Ultimate Packer for eXecutables

Snapshot of gominimal/pkgs commit `75fcc0c216a965906cff4df6f7c16cf03acdca5b` (pushed 2026-08-23T17:32:57.000Z).

## Install

```sh
min add upx
```

## Direct advisories

None at this commit.

## Transitive advisories

2 advisories inherited through runtime dependencies:

- CVE-2026-5435 (HIGH) via glibc
- CVE-2026-6238 (MEDIUM) via glibc

## Dependencies

- Build (5): base, cmake, ninja, toolchain, glibc
- Runtime (1): glibc

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 34 | low |
| advisories | 25 | low |
| quality | 28 | low |
| maintenance | 65 | mid |
| licence | 90 | good |

## Links

- Homepage: https://upx.github.io
- Package page (HTML): https://minimal.dev/pkgs/upx
- JSON API (floats latest): https://minimal.dev/api/pkgs/upx.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/upx/sbom.json