A medium severity security vulnerability (CVE-2026-44431) affects the miniforge3 package due to an issue in urllib3, a Python HTTP client library. The vulnerability impacts confidentiality but does not affect integrity or availability. Fixed versions 25.11.0.1-r6 and 26.3.2.3-r6 address the issue.