A high-severity security vulnerability (CVE-2026-57585) affects the miniforge3 package, specifically in the MessagePack serializer implementation for Python msgpack. The vulnerability impacts versions prior to 25.11.0.1-r6 and can cause a denial of service (availability impact) without compromising confidentiality or integrity. A patch is available in version 25.11.0.1-r6.