CLEANSTART-2026-AT94984: http

Q: What level of access does an attacker need to attempt exploitation?

The vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required. It also indicates that additional attack requirements are present, but the provided data does not specify what those requirements are.

Q: What impact is indicated if exploitation succeeds?

The supplied severity vector indicates a low integrity impact. It does not indicate confidentiality or availability impact, and it does not indicate impacts on subsequent systems.

Published Nov 14, 2026

Updated

Security vulnerability affects the miniforge3 package. http.

Affected Software

1 affected componentFixes available

cleanstart/miniforge3<26.3.2.3-r6

26.3.2.3-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 26.3.2.3-r6

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-124249

Frequently Asked Questions

What level of access does an attacker need to attempt exploitation?

The vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required. It also indicates that additional attack requirements are present, but the provided data does not specify what those requirements are.

What impact is indicated if exploitation succeeds?