CLEANSTART-2026-XX46644: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Published Nov 14, 2026
·Updated
Security vulnerability affects the miniforge3 package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
Affected Software
1 affected componentFixes available
cleanstart/miniforge3<25.11.0.1-r6
25.11.0.1-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attack is local and requires user interaction. The vector indicates no privileges are required before exploitation.
2
What is the expected security impact if exploitation succeeds?
The vulnerability is rated medium with a 6.1 score. It may result in high confidentiality impact and low integrity impact, with no availability impact indicated.