CLEANSTART-2026-OL29937: urllib3 is an HTTP client library for Python
Published Nov 14, 2026
·Updated
Security vulnerability affects the miniforge3 package. urllib3 is an HTTP client library for Python.
Affected Software
2 affected componentsFixes available
cleanstart/miniforge3<25.11.0.1-r6
25.11.0.1-r6
cleanstart/miniforge3<26.3.2.3-r6
26.3.2.3-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6 - Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.3.2.3-r6
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No privileges are required, but user interaction is required. The vector also indicates an attack prerequisite is present.
2
What is the expected security impact if exploitation succeeds?
The vulnerability is rated high severity with a score of 7.6. It can have high impact on the confidentiality and integrity of the vulnerable component, with no availability impact indicated.
3
Is this remotely reachable?
Yes. The attack vector is network-based and the attack complexity is rated low.