CLEANSTART-2026-HN06444: Security fix for GHSA-6q48-6c7w-9gw2 applied in: miniforge3 26.1.1.3-r4
Security vulnerability affects the miniforge3 package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.1.1.3-r4 - Upgrade
Upgrade
miniforge3to a version that resolves this vulnerability.Fixed in 26.1.1.3-r4
Frequently Asked Questions
Which package version contains the security fix?
The fix is applied in miniforge3 26.1.1.3-r4. The advisory states that later releases also resolve the issue.
Can this issue be exploited remotely without authentication?
The supplied vector indicates network attack access and no privileges or user interaction are required. Exploitation also has high attack complexity and requires an additional prerequisite condition (AT:P).
What impact could successful exploitation have?
The supplied severity vector indicates high impact to confidentiality and integrity of the vulnerable component. It does not indicate an availability impact or impact to a subsequent component.