JavaScript is a high-level, interpreted programming language essential for creating interactive web applications, running directly in web browsers to enable dynamic content and user interface enhancements. It is integral to the web development stack, working seamlessly with HTML and CSS to build responsive and feature-rich websites.

JavaScript

Grafana is an open-source visualization and analytics software. It allows you to query, visualize, alert on, and explore your metrics and time-series database (TSDB) data.

Grafana

NPM is the default package manager for the JavaScript runtime environment Node.js.

NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Node.js is a cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Node.js

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

OpenClaw (also known as Moltbot or Clawdbot) is a self-hosted personal AI assistant that integrates with various messaging platforms and mobile or desktop operating systems to provide voice and text interactions. The architecture separates the control plane from the assistant, allowing users to host the technology on their own devices while utilizing live canvas rendering.

OpenClaw (formerly Moltbot or Clawdbot)

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-33287	HIGH	7.5	JavaScript	liquidjs	No	No	Mar 26, 2026
CVE-2026-33285	HIGH	7.5	JavaScript	liquidjs	No	No	Mar 26, 2026
CVE-2026-33671	HIGH	7.5	JavaScript	picomatch	No	Yes	Mar 25, 2026
CVE-2026-33672	MEDIUM	5.3	JavaScript	picomatch	No	Yes	Mar 25, 2026
GHSA-v3rj-xjv7-4jmq	MEDIUM	5.3	JavaScript	smol-toml	No	Yes	Mar 25, 2026

CVE-2026-31802:
JavaScript vulnerability analysis and mitigation

8.2

Related JavaScript vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-31802: JavaScript vulnerability analysis and mitigation