A high-severity security vulnerability (CVE-2026-44432) affects the miniforge3 package due to an issue in urllib3, a Python HTTP client library. The vulnerability does not impact confidentiality or integrity but causes a denial of service (availability impact). Fixed versions 25.11.0.1-r6 and 26.3.2.3-r6 address the issue.