What is CVE-2026-3449?

CVE-2026-3449 is a low-severity vulnerability in @Tootallnate/once, classified under CWE-705. CVSS score: 3.3/10. Published 2026-03-03.

How severe is CVE-2026-3449?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in @Tootallnate/once

CVE-2026-3449

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, c…

EPSS: 0.000 (4.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

N/a @Tootallnate/once — versions 0

Weakness classification (CWE)

CWE-705

References

report@snyk.io
report@snyk.io
report@snyk.io

Frequently asked questions

What is CVE-2026-3449?: CVE-2026-3449 is a low-severity vulnerability in @Tootallnate/once, classified under CWE-705. CVSS score: 3.3/10. Published 2026-03-03.
How severe is CVE-2026-3449?: Low severity. CVSS v3 base score is 3.3 out of 10.