{"api_version":"v1","generated_at":"2026-10-10T00:25:00+00:00","product":{"cve_count":20,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-publisher-not-identified-upx-f12a4e1405a1","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/upx","name":"UPX","next_cursor":null,"observations":[{"affected":"5.0","affected_versions_present":true,"cve_id":"CVE-2025-2849","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-2849","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-27T14:11:39.541Z","patch_url":"https://github.com/upx/upx/commit/e0b6ff192412f5bb5364c1948f4f6b27a0cd5ea2","primary_source":"","published":"2025-03-27T13:31:06.442Z"},{"affected":"4.2.0; 4.2.1; 4.2.2","affected_versions_present":true,"cve_id":"CVE-2024-3209","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-3209","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-13T17:52:09.080Z","patch_url":"","primary_source":"","published":"2024-04-02T23:00:05.494Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43317","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43317","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:05:22.989Z","patch_url":"https://github.com/upx/upx/issues/380","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43316","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43316","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:06:32.962Z","patch_url":"https://github.com/upx/upx/issues/381","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43315","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43315","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:08:37.064Z","patch_url":"https://github.com/upx/upx/issues/380","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43314","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43314","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:10:26.821Z","patch_url":"https://github.com/upx/upx/issues/380","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43313","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43313","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:12:23.571Z","patch_url":"https://github.com/upx/upx/issues/378","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43312","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43312","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:13:30.750Z","patch_url":"https://github.com/upx/upx/issues/379","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx before 4.0.0-git-c6b9e3c62d15","affected_versions_present":true,"cve_id":"CVE-2021-43311","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43311","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T15:17:28.186Z","patch_url":"https://github.com/upx/upx/issues/380","primary_source":"","published":"2023-03-24T00:00:00.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27802","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27802","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:42.421Z","patch_url":"","primary_source":"","published":"2022-08-25T19:38:23.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27801","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27801","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:42.453Z","patch_url":"","primary_source":"","published":"2022-08-25T19:38:10.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27800","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27800","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:43.759Z","patch_url":"","primary_source":"","published":"2022-08-25T19:37:54.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27799","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27799","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:43.968Z","patch_url":"","primary_source":"","published":"2022-08-25T19:37:43.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27798","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27798","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:43.918Z","patch_url":"","primary_source":"","published":"2022-08-25T19:37:32.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27797","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27797","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:43.623Z","patch_url":"","primary_source":"","published":"2022-08-25T19:37:18.000Z"},{"affected":"upx 4.0.0-git-87b73e5cfdc1+","affected_versions_present":true,"cve_id":"CVE-2020-27796","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27796","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T16:25:42.450Z","patch_url":"","primary_source":"","published":"2022-08-25T19:37:04.000Z"},{"affected":"Fixed in v3.96.","affected_versions_present":true,"cve_id":"CVE-2020-27788","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27788","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T16:25:42.939Z","patch_url":"https://github.com/upx/upx/issues/332","primary_source":"","published":"2022-08-18T19:05:00.000Z"},{"affected":"Fixed in v3.96.","affected_versions_present":true,"cve_id":"CVE-2020-27790","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27790","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T16:25:42.456Z","patch_url":"https://github.com/upx/upx/issues/331","primary_source":"","published":"2022-08-18T18:57:21.000Z"},{"affected":"Fixed in v3.96.","affected_versions_present":true,"cve_id":"CVE-2020-27787","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-27787","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T16:25:42.439Z","patch_url":"https://github.com/upx/upx/issues/333","primary_source":"","published":"2022-08-18T18:34:49.000Z"},{"affected":"upx 4.0","affected_versions_present":true,"cve_id":"CVE-2021-30501","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-30501","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:32:41.143Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948696","primary_source":"","published":"2021-05-26T23:54:30.000Z"},{"affected":"upx 4.0","affected_versions_present":true,"cve_id":"CVE-2021-30500","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-30500","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:32:41.094Z","patch_url":"https://github.com/upx/upx/commit/90279abdfcd235172eab99651043051188938dcc","primary_source":"","published":"2021-05-26T23:51:50.000Z"},{"affected":"UPX 3.96","affected_versions_present":true,"cve_id":"CVE-2021-20285","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-20285","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-03T17:37:22.715Z","patch_url":"","primary_source":"","published":"2021-03-26T16:35:14.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Publisher not identified"}}