CLEANSTART-2026-PK74908: `xml
Published Nov 14, 2026
·Updated
Security vulnerability affects the miniforge3 package. xml.
Affected Software
3 affected componentsFixes available
cleanstart/miniforge3<25.11.0.1-r6
25.11.0.1-r6
cleanstart/miniforge3<26.1.1.3-r4
26.1.1.3-r4
cleanstart/miniforge3<26.3.2.3-r6
26.3.2.3-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6 - Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.1.1.3-r4 - Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.3.2.3-r6
Frequently Asked Questions
1
What access would an attacker need to exploit this issue?
The severity vector indicates exploitation is possible over the network, with low attack complexity and no required privileges or user interaction.
2
What is the expected security impact?
The severity vector indicates a high availability impact, while confidentiality and integrity impacts are listed as none.