NodeBB audit

[farias]

Version of NodeBB : v4.14.2

# ./nodebb log
[cluster] Child Process (594665) has exited (code: 0, signal: null)

NodeBB v4.14.2 Copyright (C) 2013-2026 NodeBB Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under certain conditions.
For the full license, please visit: http://www.gnu.org/copyleft/gpl.html

Clustering enabled: Spinning up 1 process(es).

2026-07-27T05:29:55.357Z [4567/2024] - info: Initializing NodeBB v4.14.2 https://lemmy.cyber-neurones.org
2026-07-27T05:30:19.527Z [4567/2024] - info: [socket.io] Restricting access to origin: https://lemmy.cyber-neurones.org:*
video started
2026-07-27T05:30:25.491Z [4567/2024] - info: [plugins/web-push] VAPID keys OK.
2026-07-27T05:30:25.612Z [4567/2024] - info: Regex recompiled: (?<url>https?:\/\/[^\s]+\/(?<filename>[\w_0-9\-\.]+\.(jpg|jpeg|gif|gifv|png|svg))([^\s]*)?)
2026-07-27T05:30:25.613Z [4567/2024] - info: Cache initialized to size 3
2026-07-27T05:30:25.779Z [4567/2024] - info: [api] Adding 3 route(s) to `api/v3/plugins`
2026-07-27T05:30:25.818Z [4567/2024] - info: [router] Routes added
2026-07-27T05:30:25.898Z [4567/2024] - info: 🎉 NodeBB Ready
2026-07-27T05:30:25.903Z [4567/2024] - info: 🤝 Setting 'trust proxy' to true
2026-07-27T05:30:25.912Z [4567/2024] - info: 📡 NodeBB is now listening on: 0.0.0.0:4567
2026-07-27T05:30:25.912Z [4567/2024] - info: 🔗 Canonical URL: https://lemmy.cyber-neurones.org

Version NodeJS : v24.18.0

# node -v 
v24.18.0

Version package : 12.0.1

# npm list -g
/usr/local/lib
├── corepack@0.35.0
├── n@10.2.0
└── npm@12.0.1

NPX :

# npx npm-check-updates -u
npm notice run nodebb@4.14.2 npx
npm notice run 'ncu' -u
Upgrading /home/farias/nodebb/package.json
[====================] 164/164 100%
All dependencies match the latest package versions :)

Build : Issue with ./build/public/scripts-client.js

# ./nodebb build
  started
2026-07-27T06:49:22.321Z [4567/2873] - info: [build] Building in parallel mode
2026-07-27T06:49:22.322Z [4567/2873] - info: [build]         plugin static dirs  build started
2026-07-27T06:49:22.323Z [4567/2873] - info: [build]          requirejs modules  build started
2026-07-27T06:49:22.323Z [4567/2873] - info: [build]           client js bundle  build started
2026-07-27T06:49:22.324Z [4567/2873] - info: [build]            admin js bundle  build started
2026-07-27T06:49:22.324Z [4567/2873] - info: [build]         client side styles  build started
2026-07-27T06:49:22.324Z [4567/2873] - info: [build] admin control panel styles  build started
2026-07-27T06:49:22.326Z [4567/2873] - info: [build]                  templates  build started
2026-07-27T06:49:22.326Z [4567/2873] - info: [build]                  languages  build started
2026-07-27T06:49:23.129Z [4567/2873] - info: [build]         plugin static dirs  build completed in 0.807sec
2026-07-27T06:49:24.363Z [4567/2873] - info: [build]            admin js bundle  build completed in 2.039sec
2026-07-27T06:49:24.363Z [4567/2873] - info: [build]           client js bundle  build completed in 2.04sec
2026-07-27T06:49:29.967Z [4567/2873] - info: [build]          requirejs modules  build completed in 7.643sec
2026-07-27T06:49:29.967Z [4567/2873] - info: [build] Bundling with Webpack.
2026-07-27T06:49:30.084Z [4567/2873] - info: [build]         client side styles  build completed in 7.76sec
2026-07-27T06:49:30.184Z [4567/2873] - info: [build] admin control panel styles  build completed in 7.859sec
[10%] building (25/251 modules)
[10%] building (400/491 modules)
338 assets
541 modules

ERROR in ./build/public/scripts-client.js 3433:5
Module parse failed: Unexpected token (3433:5)
You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
| });
| 
> ;CC0 1.0 Universal
| 
| Statement of Purpose

webpack 5.108.4 compiled with 1 error in 10716 ms
2026-07-27T06:49:46.038Z [4567/2873] - info: [build] Asset compilation successful. Completed in 23.713sec.

[farias]

Plugins :

# ./nodebb plugins
Active plugins:
	* @nodebb/nodebb-plugin-reactions@3.0.2 (installed, enabled)
	* @nodebb/nodebb-plugin-user-level@3.0.0 (installed, enabled)
	* @nodebb/nodebb-plugin-youtube-embed@1.0.0 (installed, enabled)
	* nodebb-plugin-2factor@8.0.1 (installed, disabled)
	* nodebb-plugin-composer-default@11.0.4 (installed, enabled)
	* nodebb-plugin-dbsearch@7.0.0 (installed, enabled)
	* nodebb-plugin-emoji@6.0.14 (installed, enabled)
	* nodebb-plugin-emoji-android@4.1.1 (installed, disabled)
	* nodebb-plugin-extended-markdown@2.1.1 (installed, enabled)
	* nodebb-plugin-feed@4.0.1 (installed, enabled)
	* nodebb-plugin-html5videoplayer@0.2.5 (installed, enabled)
	* nodebb-plugin-imagemagick@3.0.0 (installed, disabled)
	* nodebb-plugin-imgbed@3.0.0 (installed, enabled)
	* nodebb-plugin-link-preview@2.2.8 (installed, enabled)
	* nodebb-plugin-markdown@13.2.6 (installed, enabled)
	* nodebb-plugin-mentions@5.0.0 (installed, enabled)
	* nodebb-plugin-poll@4.0.15 (installed, enabled)
	* nodebb-plugin-spam-be-gone@2.3.4 (installed, enabled)
	* nodebb-plugin-web-push@0.8.1 (installed, enabled)
	* nodebb-rewards-essentials@1.0.3 (installed, enabled)
	* nodebb-theme-harmony@3.1.7 (installed, enabled)
	* nodebb-theme-lavender@8.0.6 (installed, disabled)
	* nodebb-theme-peace@3.0.6 (installed, disabled)
	* nodebb-theme-persona@15.0.11 (installed, disabled)
	* nodebb-widget-essentials@8.0.4 (installed, enabled)

[farias]

J’ai fait un post : https://community.nodebb.org/