CLEANSTART-2026-GQ78665: urllib3 is an HTTP client library for Python
Published Nov 14, 2026
·Updated
Security vulnerability affects the miniforge3 package. urllib3 is an HTTP client library for Python.
Affected Software
2 affected componentsFixes available
cleanstart/miniforge3<25.11.0.1-r6
25.11.0.1-r6
cleanstart/miniforge3<26.3.2.3-r6
26.3.2.3-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6 - Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.3.2.3-r6
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What impact is indicated if the vulnerability is exploited?
The supplied vector indicates a low availability impact. It does not indicate confidentiality or integrity impact on the vulnerable component.