Skip to content
OpenAdvisories

Weakness (CWE)

CWE-705: Incorrect Control Flow Scoping

Class Incomplete

The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

Source: MITRE CWE-705

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-40208

    Denial of service via DoH3 queries

    An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

    PowerDNS DNSdist dnsdist dnsdist Debian Ubuntu
  • Low 3.3
    CVE-2026-3449

    @tootallnate/once vulnerable to Incorrect Control Flow Scoping

    Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or …

    @tootallnate/once npm