CVE-2026-3449 vulnerabilities

Vulnerabilities for packages: code-server, langfuse, prism, argo-workflows, vitess, sqlpad, kubeflow-katib, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, tileserver-gl...

CVE-2026-3449

A flaw was found in @tootallnate/once. When the AbortSignal option is used, a Promise can remain in a permanently pending state after the signal is aborted. This incorrect control flow scoping can lead to stalled requests, blocked workers, or degraded application availability. Mitigation Mitigati...