Security vulnerability affects the upx package. A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-GX62553.json"