CLEANSTART-2026-NP50242: MessagePack is the serializer implementation for Python msgpack
Published Nov 14, 2026
·Updated
Security vulnerability affects the miniforge3 package. MessagePack is the serializer implementation for Python msgpack.
Affected Software
1 affected componentFixes available
cleanstart/miniforge3<25.11.0.1-r6
25.11.0.1-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6
Frequently Asked Questions
1
What access would an attacker need to exploit this issue?
The vulnerability is rated as network-accessible with low attack complexity. It requires no privileges and no user interaction.
2
What is the expected security impact?
The reported impact is limited to availability, with high availability impact. No confidentiality or integrity impact is indicated.