CLEANSTART-2026-ZN14409: urllib3 is an HTTP client library for Python

Q: What access does an attacker need according to the severity vector?

The vector indicates network reachability, no required privileges, and no user interaction. It also indicates attack requirements are present.

Q: What type of impact is indicated?

The severity vector indicates high availability impact on both the vulnerable system and subsequent systems. It indicates no confidentiality or integrity impact.

Q: Does this record identify affected or fixed miniforge3 versions?

No. The provided record does not specify affected versions, fixed versions, configuration prerequisites, or temporary mitigations.

Published Nov 14, 2026

Updated

Security vulnerability affects the miniforge3 package. urllib3 is an HTTP client library for Python.

Affected Software

2 affected componentsFixes available

cleanstart/miniforge3<25.11.0.1-r6

25.11.0.1-r6

cleanstart/miniforge3<26.3.2.3-r6

26.3.2.3-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 25.11.0.1-r6
Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 26.3.2.3-r6

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-97689

Frequently Asked Questions

What access does an attacker need according to the severity vector?

The vector indicates network reachability, no required privileges, and no user interaction. It also indicates attack requirements are present.

What type of impact is indicated?