Benjamin_Loison/cryptpad
1
0
Code Issues 59 Packages Projects Wiki

Compile this program #61

New Issue
Open
opened 2025-12-15 17:21:31 +01:00 by Benjamin_Loison · 0 comments
Benjamin_Loison commented 2025-12-15 17:21:31 +01:00
Owner
Copy Link

blob/0dd3c1f53d56dffb06651b86ead6b9b387920173/readme.md#installation

https://docs.cryptpad.org/en/dev_guide/setup.html

On my Debian 13 GNOME laptop Virtual Machine Manager Debian (trust) virtual machine:

cd cryptpad/
npm install
Output: 
Command 'npm' not found, but can be installed with:
sudo apt install npm

sudo apt install -y npm

output.txt

npm install
Output: 
npm WARN deprecated lex@1.7.9: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm WARN deprecated gar@1.0.4: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm WARN deprecated debuglog@0.0.2: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm WARN deprecated popper.js@1.16.1: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1

added 466 packages, and audited 467 packages in 25s

79 packages are looking for funding
  run `npm fund` for details

3 vulnerabilities (2 moderate, 1 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force

Run `npm audit` for details.

npm audit
Output: 
# npm audit report

ckeditor4  <=4.24.0
Severity: moderate
CKEditor cross-site scripting vulnerability in AJAX sample - https://github.com/advisories/GHSA-wh5w-82f3-wrxh
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature - https://github.com/advisories/GHSA-mw2c-vx6j-mg76
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection - https://github.com/advisories/GHSA-fq6h-4g8v-qqvm
CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover - https://github.com/advisories/GHSA-6v96-m24v-f58j
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability - https://github.com/advisories/GHSA-7r32-vfj5-c2jv
fix available via `npm audit fix --force`
Will install ckeditor4@4.25.1, which is outside the stated dependency range
node_modules/ckeditor

js-yaml  4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8m
fix available via `npm audit fix`
node_modules/js-yaml

jws  <3.2.3
Severity: high
auth0/node-jws Improperly Verifies HMAC Signature - https://github.com/advisories/GHSA-869p-cjfg-cm3x
fix available via `npm audit fix`
node_modules/jws

3 vulnerabilities (2 moderate, 1 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force

npm run install:components
Output: 

> cryptpad@2025.9.0 install:components
> node scripts/copy-components.js

npm run dev
Output: 
> cryptpad@2025.9.0 dev
> DEV=1 node server.js

Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
=============================
Create your first admin account and customize your instance by visiting
http://localhost:3000/install/#XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
=============================
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js
[blob/0dd3c1f53d56dffb06651b86ead6b9b387920173/readme.md#installation](https://github.com/cryptpad/cryptpad/blob/0dd3c1f53d56dffb06651b86ead6b9b387920173/readme.md#installation) https://docs.cryptpad.org/en/dev_guide/setup.html On my Debian 13 GNOME laptop Virtual Machine Manager *Debian (trust)* virtual machine: ``` cd cryptpad/ npm install ``` <details> <summary>Output:</summary> ``` Command 'npm' not found, but can be installed with: sudo apt install npm ``` </details> ```bash sudo apt install -y npm ``` [output.txt](/attachments/43d5228d-0685-4960-843b-7ce7153e7a9c) ``` npm install ``` <details> <summary>Output:</summary> ``` npm WARN deprecated lex@1.7.9: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. npm WARN deprecated gar@1.0.4: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. npm WARN deprecated debuglog@0.0.2: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. npm WARN deprecated popper.js@1.16.1: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1 added 466 packages, and audited 467 packages in 25s 79 packages are looking for funding run `npm fund` for details 3 vulnerabilities (2 moderate, 1 high) To address issues that do not require attention, run: npm audit fix To address all issues, run: npm audit fix --force Run `npm audit` for details. ``` </details> ``` npm audit ``` <details> <summary>Output:</summary> ``` # npm audit report ckeditor4 <=4.24.0 Severity: moderate CKEditor cross-site scripting vulnerability in AJAX sample - https://github.com/advisories/GHSA-wh5w-82f3-wrxh CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature - https://github.com/advisories/GHSA-mw2c-vx6j-mg76 CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection - https://github.com/advisories/GHSA-fq6h-4g8v-qqvm CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover - https://github.com/advisories/GHSA-6v96-m24v-f58j Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability - https://github.com/advisories/GHSA-7r32-vfj5-c2jv fix available via `npm audit fix --force` Will install ckeditor4@4.25.1, which is outside the stated dependency range node_modules/ckeditor js-yaml 4.0.0 - 4.1.0 Severity: moderate js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8m fix available via `npm audit fix` node_modules/js-yaml jws <3.2.3 Severity: high auth0/node-jws Improperly Verifies HMAC Signature - https://github.com/advisories/GHSA-869p-cjfg-cm3x fix available via `npm audit fix` node_modules/jws 3 vulnerabilities (2 moderate, 1 high) To address issues that do not require attention, run: npm audit fix To address all issues, run: npm audit fix --force ``` </details> ``` npm run install:components ``` <details> <summary>Output:</summary> ``` > cryptpad@2025.9.0 install:components > node scripts/copy-components.js ``` </details> ``` npm run dev ``` <details> <summary>Output:</summary> ``` > cryptpad@2025.9.0 dev > DEV=1 node server.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js ============================= Create your first admin account and customize your instance by visiting http://localhost:3000/install/#XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ============================= Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js Config not found, loading the example config. You can customize the configuration by copying config/config.example.js to ../config/config.js ``` </details>
output.txt
150 KiB
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Benjamin_Loison
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Benjamin_Loison/cryptpad#61
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?