CLEANSTART-2026-XW53717 Security fixes in miniforge3 26.1.1.2-r0

Package miniforge3 version 26.1.1.2-r0 fixes 1 vulnerabilities: CVE-2026-59890...

CLEANSTART-2026-EU14959 Security fixes in miniforge3 26.3.2.3-r0

Package miniforge3 version 26.3.2.3-r0 fixes 1 vulnerabilities: CVE-2026-59890...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-jupyter-web-app, py3-pipenv, datadog-agent, superset, mlflow, pypy-3.10, airflow, httpie, kubeflow-volumes-web-app, py3-setuptools...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: superset-fips, mlflow-fips, openstack-horizon-2025.1, kubeflow-katib, openstack-glance-2025.1-fips, superset, openstack-horizon-2025.2-fips, awx, datadog-agent, mlflow, py3-setuptools, datahub-ingestion, opal, ansible-operator, datahub-ingestion-fips, duplicity,...

argo-proxy (>=2.5.0, <=2.5.1), authorizenot (1.1.4.6) +39 more potentially affected by CVE-2026-59890 via setuptools (74.1.3)

setuptools PYPI version 74.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - argo-proxy =2.5.0, =0.19.8, =0.0.1, =2.3.0, =0.1.7, =1.0.0, =0.3.2, =1.2.1, =1.2.5 and more Source cves: CVE-2026-59890 Source advisory:...

flexrunner (1.0.9), graal (>=0.4.3rc5, <=0.4.3) +13 more potentially affected by CVE-2026-59890 via setuptools (67.0.0)

setuptools PYPI version 67.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - flexrunner 1.0.9 - graal =0.4.3rc5, =0.104.0rc8, =1.0.2, =0.1.0, =0.21.2rc5, =0.3.6rc5, =0.2.6rc5, =0.2.6rc5, =0.2.6rc5, =1.1.0, =0.6.0rc4,...

apknife (>=1.0.4, <=1.2.0), aprsd (>=4.1.1, <=4.1.2) +41 more potentially affected by CVE-2026-59890 via setuptools (75.8.2)

setuptools PYPI version 75.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apknife =1.0.4, =4.1.1, =1.1.2, =0.1.7, =1.1.0, =2025.1.0b3, =2026.3.0b2, =2026.4.6 and more Source cves: CVE-2026-59890 Source advisory:...

variationist (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-59890 via setuptools (80.6.0)

setuptools PYPI version 80.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - variationist =0.1.5, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

an-website (>=22.7.23, <=22.8.3), aws-toolbox (0.0.2) +10 more potentially affected by CVE-2026-59890 via setuptools (63.2.0)

setuptools PYPI version 63.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.23, =4.0.0, =1.0.6, =1.0.1, =0.13.0, =0.0.3, =0.0.4 - vpc-img-inst 1.0.0b7 Source cves: CVE-2026-59890 Source advisory:...

bantam (>=0.3.3, <=1.0.0), commit-helper (>=3.4.15, <=3.4.16) +12 more potentially affected by CVE-2026-59890 via setuptools (40.8.0)

setuptools PYPI version 40.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bantam =0.3.3, =3.4.15, =2.0.0, =5.0.0, =2.1.0, =0.1.0, =1.1.1, =0.1.5, =0.1.6 Source cves: CVE-2026-59890 Source advisory:...

certbot-dns-mijn-host (>=0.0.2, <=0.0.9), codeforlife (>=0.22.10, <=0.25.22) +8 more potentially affected by CVE-2026-59890 via setuptools (74.0.0)

setuptools PYPI version 74.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - certbot-dns-mijn-host =0.0.2, =0.22.10, =7.2.1, =0.0.21, =10.4.0, =0.1.0, =0.5.3, =0.6.6 Source cves: CVE-2026-59890 Source advisory:...

spicecode (>=0.2.0, <=2.1.7) potentially affected by CVE-2026-59890 via setuptools (75.8.1)

setuptools PYPI version 75.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - spicecode =0.2.0, =2.1.7 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

admetica (>=1.3.0, <=1.4.1), androidteleporter (1.1.1) +53 more potentially affected by CVE-2026-59890 via setuptools (72.1.0)

setuptools PYPI version 72.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - admetica =1.3.0, =0.5.0.dev0, =0.1.0, =1.8.10, =0.0.1, =0.5.0.dev0, =1.7.36, =0.0.7, =1.1.0, =0.1.7, =0.1.20 and more Source cves:...

archetypal (2.13.0), freeflux (>=0.3.7, <=0.3.8) +6 more potentially affected by CVE-2026-59890 via setuptools (64.0.3)

setuptools PYPI version 64.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal 2.13.0 - freeflux =0.3.7, =1.0.17, =1.0.10, =0.1.0rc1, =0.3.1, =0.6.5 Source cves: CVE-2026-59890 Source advisory:...

air-df (0.1.3), asrticlang (1.0.0) +31 more potentially affected by CVE-2026-59890 via setuptools (49.2.1)

setuptools PYPI version 49.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - air-df 0.1.3 - asrticlang 1.0.0 - azure-arm-nb-extensions =0.0.1, =0.1.0, =0.0.1, =2.0.4, =0.1.0, =0.0.1.9000, =1.3.9, =2.21.242, =0.5.3,...

asapppy (>=0.1.0.dev15, <=0.2.0b1), batterylearn (1.1.3) +21 more potentially affected by CVE-2026-59890 via setuptools (49.6.0)

setuptools PYPI version 49.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - asapppy =0.1.0.dev15, =1.0.0.dev33, =0.1.59, =2.0.0, =0.4.4, =0.0.3, =0.9.8, =1.0.0, =0.2.2, =1.0.17, =1.16.0 and more Source cves:...

nikgapps (>=3.29.0, <=3.65.0), niklibrary (>=0.35.0, <=0.37.0) +6 more potentially affected by CVE-2026-59890 via setuptools (78.0.2)

setuptools PYPI version 78.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - nikgapps =3.29.0, =0.35.0, =0.5.0, =0.6.11, =0.8.11, =2025.5.23, =2025.5.26 - scancodeio 34.10.1 Source cves: CVE-2026-59890 Source advisor...

afw (>=0.0.6, <=0.0.21), agentic-kit-eda (0.0.2) +109 more potentially affected by CVE-2026-59890 via setuptools (75.1.0)

setuptools PYPI version 75.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - afw =0.0.6, =0.1.21, =3.0.12, =2.0.0a1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

stapy (>=0.2.6, <=0.3.0) potentially affected by CVE-2026-59890 via setuptools (59.3.0)

setuptools PYPI version 59.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - stapy =0.2.6, =0.3.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

atooms (>=3.22.0, <=3.30.2), atooms-active (>=1.0.2, <=1.0.5) +38 more potentially affected by CVE-2026-59890 via setuptools (73.0.1)

setuptools PYPI version 73.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - atooms =3.22.0, =1.0.2, =0.1.0, =1.0.1, =4.0.0, =1.0.1, =0.9.7, =0.20.0, =0.9.16, =0.1.0, =0.5.2, =4.3.1, =4.3.3 and more Source cves:...