CLEANSTART-2026-DE53571: urllib3 is an HTTP client library for Python

Q: What does an attacker need to exploit this issue?

The severity vector indicates that exploitation is possible over the network, with low attack complexity, no required privileges, and no user interaction.

Q: What is the expected security impact?

The provided severity vector indicates low confidentiality impact, with no integrity or availability impact indicated.

Published Nov 14, 2026

Updated

Security vulnerability affects the miniforge3 package. urllib3 is an HTTP client library for Python.

Affected Software

2 affected componentsFixes available

cleanstart/miniforge3<25.11.0.1-r6

25.11.0.1-r6

cleanstart/miniforge3<26.3.2.3-r6

26.3.2.3-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 25.11.0.1-r6
Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 26.3.2.3-r6

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-44431

Frequently Asked Questions

What does an attacker need to exploit this issue?

The severity vector indicates that exploitation is possible over the network, with low attack complexity, no required privileges, and no user interaction.

What is the expected security impact?