@tootallnate/once

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Low 3.3

CVE-2026-3449

@tootallnate/once vulnerable to Incorrect Control Flow Scoping

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or …

langfuse-3-worker katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband Wolfi npm

Mar 3, 2026