Navigation

    Logo
    • Register
    • Login
    • Search
    • Recent
    • Tags
    • Unread
    • Categories
    • Unreplied
    • Popular
    • GitHub
    • Docu
    • Hilfe
    1. Home
    2. Deutsch
    3. ioBroker Allgemein
    4. [Gelöst] ioBroker node.js weicht von Kommandozeile ab

    NEWS

    • ioBroker@Smart Living Forum Solingen, 14.06. - Agenda added

    • ioBroker goes Matter ... Matter Adapter in Stable

    • Monatsrückblick - April 2025

    [Gelöst] ioBroker node.js weicht von Kommandozeile ab

    This topic has been deleted. Only users with topic management privileges can see it.
    • lethuer
      lethuer @Thomas Braun last edited by

      @thomas-braun sagte in ioBroker node.js weicht von Kommandozeile ab:

      Und das Alt-System lief auch auf redis?

      das weiß ich nicht...
      meine alte Config steht hier weiter oben in dem Post, vielleicht kann man daraus ja etwas ableiten ?
      Die war so alt (noch Stretch OS), dass ich updaten sollte 😉

      pi@raspberrypi:~ $ iobroker list instances
       Cannot read system.config: null (OK when migrating or restoring)
      
      
      + instance is alive
      
      Thomas Braun 2 Replies Last reply Reply Quote 0
      • Thomas Braun
        Thomas Braun Most Active @lethuer last edited by

        @lethuer

        https://forum.iobroker.net/topic/59549/iob-diag-skript

        Schau mal ob du damit parat kommst.

        lethuer 1 Reply Last reply Reply Quote 0
        • Thomas Braun
          Thomas Braun Most Active @lethuer last edited by

          @lethuer

          apt policy redis
          

          sagt?

          lethuer 1 Reply Last reply Reply Quote 0
          • lethuer
            lethuer @Thomas Braun last edited by

            @thomas-braun sagte in ioBroker node.js weicht von Kommandozeile ab:

            @lethuer

            apt policy redis
            

            sagt?

            pi@raspberrypi:~ $ apt policy redis
            redis:
              Installiert:           (keine)
              Installationskandidat: 5:6.0.16-1+deb11u2
              Versionstabelle:
                 5:6.0.16-1+deb11u2 500
                    500 http://deb.debian.org/debian bullseye/main arm64 Packages
                    500 http://deb.debian.org/debian bullseye/main armhf Packages
                    500 http://security.debian.org/debian-security bullseye-security/main arm64 Packages
                    500 http://security.debian.org/debian-security bullseye-security/main armhf Packages
            
            Thomas Braun 1 Reply Last reply Reply Quote 0
            • Thomas Braun
              Thomas Braun Most Active @lethuer last edited by

              @lethuer

              Dann installier das mal.

              lethuer 1 Reply Last reply Reply Quote 0
              • lethuer
                lethuer @Thomas Braun last edited by

                @thomas-braun

                *** BASE SYSTEM ***
                Architecture:   aarch64
                Docker:         false
                Virtualization: none
                Distributor ID: Debian
                Description:    Debian GNU/Linux 11 (bullseye)
                Release:        11
                Codename:       bullseye
                
                PRETTY_NAME="Debian GNU/Linux 11 (bullseye)"
                NAME="Debian GNU/Linux"
                VERSION_ID="11"
                VERSION="11 (bullseye)"
                VERSION_CODENAME=bullseye
                ID=debian
                HOME_URL="https://www.debian.org/"
                SUPPORT_URL="https://www.debian.org/support"
                BUG_REPORT_URL="https://bugs.debian.org/"
                
                Systemuptime and Load:
                 20:53:23 up  2:06,  3 users,  load average: 0.24, 0.17, 0.07
                CPU threads: 4
                
                *** Time and Time Zones ***
                Wed Nov  9 19:53:23 UTC 2022
                Wed Nov  9 20:53:23 CET 2022
                CET +0100
                Europe/Berlin
                
                *** User and Groups ***
                pi
                /home/pi
                pi adm dialout cdrom sudo audio video plugdev games users input render netdev lpadmin gpio i2c spi iobroker
                
                *** X-Server-Setup ***
                X-Server:       true
                Desktop:
                Terminal:       tty
                
                *** MEMORY ***
                               total        used        free      shared  buff/cache   available
                Mem:            909M        259M        139M        1.0M        510M        584M
                Swap:            99M        1.0M         98M
                Total:          1.0G        261M        237M
                
                          909 M total memory
                          260 M used memory
                          296 M active memory
                          373 M inactive memory
                          139 M free memory
                           24 M buffer memory
                          485 M swap cache
                           99 M total swap
                            1 M used swap
                           98 M free swap
                
                *** FILESYSTEM ***
                Filesystem     Type      Size  Used Avail Use% Mounted on
                /dev/root      ext4       15G  4.0G  9.8G  29% /
                devtmpfs       devtmpfs  325M     0  325M   0% /dev
                tmpfs          tmpfs     455M     0  455M   0% /dev/shm
                tmpfs          tmpfs     182M  1.1M  181M   1% /run
                tmpfs          tmpfs     5.0M  4.0K  5.0M   1% /run/lock
                /dev/mmcblk0p1 vfat      255M   31M  225M  12% /boot
                tmpfs          tmpfs      91M   20K   91M   1% /run/user/1000
                
                Show mounted filesystems (real ones only):
                TARGET  SOURCE         FSTYPE OPTIONS
                /       /dev/mmcblk0p2 ext4   rw,noatime
                `-/boot /dev/mmcblk0p1 vfat   rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mixed,errors=remount-ro
                
                Files in neuralgic directories:
                
                /var:
                538M    /var/
                183M    /var/lib
                149M    /var/log
                145M    /var/log/journal/0f2905bc2b02407cae80512d9eaff7bf
                145M    /var/log/journal
                
                /opt/iobroker/backups:
                3.3M    /opt/iobroker/backups/
                
                /opt/iobroker/iobroker-data:
                25M     /opt/iobroker/iobroker-data/
                15M     /opt/iobroker/iobroker-data/files
                13M     /opt/iobroker/iobroker-data/files/admin.admin/custom/static/js
                13M     /opt/iobroker/iobroker-data/files/admin.admin/custom/static
                13M     /opt/iobroker/iobroker-data/files/admin.admin/custom
                
                The five largest files in iobroker-data are:
                9.5M    /opt/iobroker/iobroker-data/objects.jsonl
                6.3M    /opt/iobroker/iobroker-data/files/admin.admin/custom/static/js/vendors-node_modules_iobroker_adapter-react-v5_assets_devices_parseNames_js-node_modules_iobr-99c23e.847b8ad9.chunk.js.map
                2.8M    /opt/iobroker/iobroker-data/files/admin.admin/custom/static/js/vendors-node_modules_iobroker_adapter-react-v5_assets_devices_parseNames_js-node_modules_iobr-99c23e.847b8ad9.chunk.js
                1.6M    /opt/iobroker/iobroker-data/files/admin.admin/custom/static/js/vendors-node_modules_mui_material_Accordion_index_js-node_modules_mui_material_AccordionDetai-57e02d.0886b730.chunk.js.map
                976K    /opt/iobroker/iobroker-data/states.jsonl
                
                *** NodeJS-Installation ***
                /usr/bin/nodejs         v16.18.1
                /usr/bin/node           v16.18.1
                /usr/bin/npm            8.19.2
                
                nodejs:
                  Installed: 16.18.1-deb-1nodesource1
                  Candidate: 16.18.1-deb-1nodesource1
                  Version table:
                 *** 16.18.1-deb-1nodesource1 500
                        500 https://deb.nodesource.com/node_16.x bullseye/main arm64 Packages
                        100 /var/lib/dpkg/status
                     12.22.12~dfsg-1~deb11u1 500
                        500 http://security.debian.org/debian-security bullseye-security/main arm64 Packages
                     12.22.5~dfsg-2~11u1 500
                        500 http://deb.debian.org/debian bullseye/main arm64 Packages
                
                Temp directories causing npm8 problem: 0
                
                *** ioBroker-Installation ***
                
                Core adapters versions
                js-controller:  4.0.23
                admin:          4.1.10
                
                Enabled adapters with bindings
                
                ioBroker-Repositories
                 Cannot read system.config: null (OK when migrating or restoring)
                List is empty
                
                ioBroker-Instances
                 Cannot read system.config: null (OK when migrating or restoring)
                Error: Object "system.config" not found
                
                Objects and States
                Please stand by - This may take a while
                Objects:        33
                States:         25
                
                *** OS-Repositories and Updates ***
                Hit:1 http://security.debian.org/debian-security bullseye-security InRelease
                Hit:2 http://deb.debian.org/debian bullseye InRelease
                Hit:3 http://deb.debian.org/debian bullseye-updates InRelease
                Hit:4 http://archive.raspberrypi.org/debian bullseye InRelease
                Hit:5 https://deb.nodesource.com/node_16.x bullseye InRelease
                Reading package lists... Done
                Pending Updates: 0
                
                *** Listening Ports ***
                Active Internet connections (only servers)
                Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
                tcp        0      0 127.0.0.1:6379          0.0.0.0:*               LISTEN      116        12030      498/redis-server 12
                tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      0          14244      490/cupsd
                tcp        0      0 127.0.0.1:9001          0.0.0.0:*               LISTEN      1001       17153      1645/iobroker.js-co
                tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      0          14196      516/sshd: /usr/sbin
                tcp6       0      0 ::1:6379                :::*                    LISTEN      116        12031      498/redis-server 12
                tcp6       0      0 ::1:631                 :::*                    LISTEN      0          14243      490/cupsd
                tcp6       0      0 :::22                   :::*                    LISTEN      0          14198      516/sshd: /usr/sbin
                udp        0      0 0.0.0.0:68              0.0.0.0:*                           0          14451      455/dhcpcd
                udp        0      0 0.0.0.0:631             0.0.0.0:*                           0          12924      541/cups-browsed
                udp        0      0 0.0.0.0:34964           0.0.0.0:*                           108        10144      352/avahi-daemon: r
                udp        0      0 0.0.0.0:5353            0.0.0.0:*                           108        10142      352/avahi-daemon: r
                udp6       0      0 :::546                  :::*                                0          14492      455/dhcpcd
                udp6       0      0 :::55488                :::*                                108        10145      352/avahi-daemon: r
                udp6       0      0 :::5353                 :::*                                108        10143      352/avahi-daemon: r
                
                
                ======================= SUMMARY =======================
                                        v.0.0.6
                
                
                Operatingsystem:        Debian GNU/Linux 11 (bullseye)
                Installation:           Native
                Timezone:               Europe/Berlin
                User-ID:                1000
                X-Server:               true
                
                Pending OS-Updates:     0
                
                Nodejs-Installation:    /usr/bin/nodejs         v16.18.1
                                        /usr/bin/node           v16.18.1
                                        /usr/bin/npm            8.19.2
                
                ioBroker Core:          js-controller           4.0.23
                                        admin                   4.1.10
                
                Error: Object "system.config" not found
                Pending iob updates:    0
                
                List is empty
                 Cannot read system.config: null (OK when migrating or restoring)
                
                Objects:                33
                States:                 25
                
                Size of iob-Database:
                
                9.5M    /opt/iobroker/iobroker-data/objects.jsonl
                16K     /opt/iobroker/iobroker-data/objects.json.bak
                16K     /opt/iobroker/iobroker-data/objects.json
                976K    /opt/iobroker/iobroker-data/states.jsonl
                
                
                ====================== END OF SUMMARY ==================
                
                1 Reply Last reply Reply Quote 0
                • lethuer
                  lethuer @Thomas Braun last edited by lethuer

                  @thomas-braun das habe ich bereits so gemacht...

                  pi@raspberrypi:~ $ sudo apt install redis-server -y
                  Paketlisten werden gelesen… Fertig
                  Abhängigkeitsbaum wird aufgebaut… Fertig
                  Statusinformationen werden eingelesen… Fertig
                  redis-server ist schon die neueste Version (5:6.0.16-1+deb11u2).
                  0 aktualisiert, 0 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.
                  

                  Es kommt aber weiterhin:

                  pi@raspberrypi:~ $ apt policy redis
                  redis:
                    Installiert:           (keine)
                    Installationskandidat: 5:6.0.16-1+deb11u2
                    Versionstabelle:
                       5:6.0.16-1+deb11u2 500
                          500 http://deb.debian.org/debian bullseye/main arm64 Packages
                          500 http://deb.debian.org/debian bullseye/main armhf Packages
                          500 http://security.debian.org/debian-security bullseye-security/main arm64 Packages
                          500 http://security.debian.org/debian-security bullseye-security/main armhf Packages
                  
                  Thomas Braun 1 Reply Last reply Reply Quote 0
                  • Thomas Braun
                    Thomas Braun Most Active @lethuer last edited by

                    @lethuer

                    sudo apt install redis
                    

                    Und schalte die graphische Oberfläche aus.

                    lethuer 1 Reply Last reply Reply Quote 0
                    • lethuer
                      lethuer @Thomas Braun last edited by lethuer

                      @thomas-braun sagte in ioBroker node.js weicht von Kommandozeile ab:

                      Und schalte die graphische Oberfläche aus.

                      Danke ! Wie mache ich das ? Einfach so ?

                      sudo systemctl set-default multi-user.target
                      

                      Nun kommt:

                      pi@raspberrypi:~ $ sudo apt install redis
                      Paketlisten werden gelesen… Fertig
                      Abhängigkeitsbaum wird aufgebaut… Fertig
                      Statusinformationen werden eingelesen… Fertig
                      Die folgenden NEUEN Pakete werden installiert:
                        redis
                      0 aktualisiert, 1 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.
                      Es müssen 56,8 kB an Archiven heruntergeladen werden.
                      Nach dieser Operation werden 67,6 kB Plattenplatz zusätzlich benutzt.
                      Holen:1 http://deb.debian.org/debian bullseye/main arm64 redis all 5:6.0.16-1+deb11u2 [56,8 kB]
                      Es wurden 56,8 kB in 0 s geholt (372 kB/s).
                      Vormals nicht ausgewähltes Paket redis wird gewählt.
                      (Lese Datenbank ... 105085 Dateien und Verzeichnisse sind derzeit installiert.)
                      Vorbereitung zum Entpacken von .../redis_5%3a6.0.16-1+deb11u2_all.deb ...
                      Entpacken von redis (5:6.0.16-1+deb11u2) ...
                      redis (5:6.0.16-1+deb11u2) wird eingerichtet ...
                      
                      
                      pi@raspberrypi:~ $ apt policy redis
                      redis:
                        Installiert:           5:6.0.16-1+deb11u2
                        Installationskandidat: 5:6.0.16-1+deb11u2
                        Versionstabelle:
                       *** 5:6.0.16-1+deb11u2 500
                              500 http://deb.debian.org/debian bullseye/main arm64 Packages
                              500 http://deb.debian.org/debian bullseye/main armhf Packages
                              500 http://security.debian.org/debian-security bullseye-security/main arm64 Packages
                              500 http://security.debian.org/debian-security bullseye-security/main armhf Packages
                              100 /var/lib/dpkg/status
                      

                      Die ioBroker Oberfläche kommt nach wie vor nicht...

                      Thomas Braun 1 Reply Last reply Reply Quote 0
                      • Thomas Braun
                        Thomas Braun Most Active @lethuer last edited by

                        @lethuer

                        GUI aus:

                        sudo raspi-config
                        

                        Dann im Menü:

                        1 System Options       
                        S5 Boot / Auto Login 
                        B1 Console           
                        

                        Geht auch (linux-typisch) auf andere Arten.

                        lethuer 1 Reply Last reply Reply Quote 0
                        • lethuer
                          lethuer @Thomas Braun last edited by lethuer

                          @thomas-braun Ok habe ich gemacht...:)

                          Auch nach der Installation und dem Neustarten tut sich nichts in Sachen ioBroker Oberfläche.

                          pi@raspberrypi:~ $ iobroker list instances
                           Cannot read system.config: null (OK when migrating or restoring)
                          
                          
                          + instance is alive
                          
                          Thomas Braun 1 Reply Last reply Reply Quote 0
                          • Thomas Braun
                            Thomas Braun Most Active @lethuer last edited by

                            @lethuer

                            Ich wollte also das zuvor erstellte Backup von GDrive über BackitUp einspielen, was auch gut aussah.

                            Welche Versionen waren denn im Backup drin? Hattest du das auf einen aktuellen Stand gebracht? Denn du kannst nicht einfach ein 'steinaltes Backup' in einen frischen ioBroker stopfen.

                            lethuer 1 Reply Last reply Reply Quote 0
                            • lethuer
                              lethuer @Thomas Braun last edited by

                              @thomas-braun sagte in ioBroker node.js weicht von Kommandozeile ab:

                              Welche Versionen waren denn im Backup drin?

                              Soweit es eben ging hatte ich alle Adapter aktualisiert.
                              Einige haben das Update aber verweigert da js.controller >= 3.3.22 erwartet wurde.
                              Das war ja der Grund für das neue OS.

                              Thomas Braun 1 Reply Last reply Reply Quote 0
                              • Thomas Braun
                                Thomas Braun Most Active @lethuer last edited by

                                @lethuer

                                Bei dem Abstand zwischen den js-controller-Versionen wirst du da kein Land sehen.

                                lethuer 1 Reply Last reply Reply Quote 0
                                • lethuer
                                  lethuer @Thomas Braun last edited by lethuer

                                  @thomas-braun sagte

                                  Bei dem Abstand zwischen den js-controller-Versionen wirst du da kein Land sehen.

                                  Einzige Chance ist also neu anzufangen ?
                                  Oder kann ich zumindest meine Scenen retten bzw auf ein neues System übertragen ?
                                  Die alte SD Karte habe ich natürlich 🙂

                                  Thomas Braun 1 Reply Last reply Reply Quote 0
                                  • Thomas Braun
                                    Thomas Braun Most Active @lethuer last edited by

                                    @lethuer

                                    Oder es findet sich wer anders. Ich befasse mich nicht mit so alten Versionen.
                                    Hab also keine Erfahrung was solche Zeitreisen angeht.

                                    lethuer 1 Reply Last reply Reply Quote 0
                                    • lethuer
                                      lethuer @Thomas Braun last edited by

                                      @thomas-braun

                                      und die js-controller-Version vor dem Update des OS irgendwie zu updaten geht nicht ?

                                      Thomas Braun 1 Reply Last reply Reply Quote 0
                                      • Thomas Braun
                                        Thomas Braun Most Active @lethuer last edited by

                                        @lethuer sagte in ioBroker node.js weicht von Kommandozeile ab:

                                        und die js-controller-Version vor dem Update des OS irgendwie zu updaten geht nicht ?

                                        Das wäre halt mein Ansatz gewesen, um diese großen Sprünge zu vermeiden.

                                        lethuer 1 Reply Last reply Reply Quote 0
                                        • lethuer
                                          lethuer @Thomas Braun last edited by

                                          @thomas-braun

                                          Mein Versuch um von 3.1.6 auf 3.3.22 zu kommen hat auch nicht geklappt...
                                          keine ahnung wie ich da noch den js-controller updaten kann um mein system zu retten.

                                          pi@ioBroker-RasPi:~$ npm install iobroker.js-controller@3.3.22
                                          
                                          added 2 packages, removed 28 packages, changed 19 packages, and audited 281 packages in 27s
                                          
                                          14 packages are looking for funding
                                            run `npm fund` for details
                                          
                                          4 vulnerabilities (3 moderate, 1 high)
                                          
                                          To address all issues (including breaking changes), run:
                                            npm audit fix --force
                                          
                                          Run `npm audit` for details.
                                          
                                          
                                          pi@ioBroker-RasPi:~$ npm audit fix --force
                                          npm WARN using --force Recommended protections disabled.
                                          npm WARN audit Updating iobroker.js-controller to 4.0.23, which is a SemVer major change.
                                          
                                          added 28 packages, removed 2 packages, changed 19 packages, and audited 307 packages in 36s
                                          
                                          18 packages are looking for funding
                                            run `npm fund` for details
                                          
                                          # npm audit report
                                          
                                          node-forge  <=1.2.1
                                          Severity: high
                                          Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
                                          Prototype Pollution in node-forge debug API. - https://github.com/advisories/GHSA-5rrq-pxf6-6jx5
                                          Prototype Pollution in node-forge util.setPath API - https://github.com/advisories/GHSA-wxgw-qj99-44c2
                                          Prototype Pollution in node-forge - https://github.com/advisories/GHSA-92xj-mqp7-vmcj
                                          Improper Verification of Cryptographic Signature in `node-forge` - https://github.com/advisories/GHSA-2r2c-g63r-vccr
                                          Improper Verification of Cryptographic Signature in node-forge - https://github.com/advisories/GHSA-x4jg-mjrx-434g
                                          Improper Verification of Cryptographic Signature in node-forge - https://github.com/advisories/GHSA-cfm4-qjh2-4765
                                          URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@1.5.3, which is a breaking change
                                          node_modules/rsa-compat/node_modules/node-forge
                                            rsa-compat  <=1.9.4
                                            Depends on vulnerable versions of node-forge
                                            node_modules/rsa-compat
                                              le-acme-core  *
                                              Depends on vulnerable versions of rsa-compat
                                              node_modules/le-acme-core
                                                iobroker.js-controller  >=1.5.4
                                                Depends on vulnerable versions of le-acme-core
                                                node_modules/iobroker.js-controller
                                          
                                          4 vulnerabilities (3 moderate, 1 high)
                                          
                                          To address all issues (including breaking changes), run:
                                            npm audit fix --force
                                          
                                          
                                          pi@ioBroker-RasPi:~$ npm audit fix --force
                                          npm WARN using --force Recommended protections disabled.
                                          npm WARN audit Updating iobroker.js-controller to 1.5.3, which is a SemVer major change.
                                          npm WARN deprecated json3@3.3.2: Please use the native JSON object instead of JSON 3
                                          npm WARN deprecated mkdirp@0.5.1: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)
                                          
                                          added 173 packages, removed 144 packages, changed 46 packages, and audited 334 packages in 1m
                                          
                                          14 packages are looking for funding
                                            run `npm fund` for details
                                          
                                          # npm audit report
                                          
                                          debug  <2.6.9
                                          Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/engine.io-client/node_modules/debug
                                          node_modules/engine.io/node_modules/debug
                                          node_modules/socket.io-adapter/node_modules/debug
                                          node_modules/socket.io-client/node_modules/debug
                                          node_modules/socket.io-parser/node_modules/debug
                                          node_modules/socket.io/node_modules/debug
                                            engine.io  <=3.5.0
                                            Depends on vulnerable versions of debug
                                            Depends on vulnerable versions of ws
                                            node_modules/engine.io
                                              socket.io  <=2.4.1
                                              Depends on vulnerable versions of debug
                                              Depends on vulnerable versions of engine.io
                                              Depends on vulnerable versions of socket.io-adapter
                                              Depends on vulnerable versions of socket.io-client
                                              Depends on vulnerable versions of socket.io-parser
                                              node_modules/socket.io
                                                iobroker.js-controller  <=2.1.1
                                                Depends on vulnerable versions of redis
                                                Depends on vulnerable versions of socket.io
                                                Depends on vulnerable versions of socket.io-client
                                                Depends on vulnerable versions of winston-daily-rotate-file
                                                Depends on vulnerable versions of yargs
                                                node_modules/iobroker.js-controller
                                            engine.io-client  <=3.3.2 || 3.4.0 - 3.5.1 || 4.0.0-alpha.0 - 4.1.3
                                            Depends on vulnerable versions of debug
                                            Depends on vulnerable versions of parsejson
                                            Depends on vulnerable versions of ws
                                            Depends on vulnerable versions of xmlhttprequest-ssl
                                            node_modules/engine.io-client
                                              socket.io-client  1.0.0-pre - 2.1.1 || 2.3.0 - 2.3.1 || 3.0.0-rc1 - 3.0.5
                                              Depends on vulnerable versions of debug
                                              Depends on vulnerable versions of engine.io-client
                                              Depends on vulnerable versions of socket.io-parser
                                              node_modules/socket.io-client
                                            socket.io-adapter  <=1.1.0
                                            Depends on vulnerable versions of debug
                                            Depends on vulnerable versions of socket.io-parser
                                            node_modules/socket.io-adapter
                                            socket.io-parser  <=3.3.2
                                            Depends on vulnerable versions of debug
                                            node_modules/socket.io-parser
                                          
                                          
                                          
                                          minimist  <=1.2.5
                                          Severity: critical
                                          Prototype Pollution in minimist - https://github.com/advisories/GHSA-xvch-5gv4-984h
                                          Prototype Pollution in minimist - https://github.com/advisories/GHSA-vh95-rmgr-6w4m
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/winston-daily-rotate-file/node_modules/minimist
                                            mkdirp  0.4.1 - 0.5.1
                                            Depends on vulnerable versions of minimist
                                            node_modules/winston-daily-rotate-file/node_modules/mkdirp
                                              winston-daily-rotate-file  1.7.0 - 1.7.2
                                              Depends on vulnerable versions of mkdirp
                                              node_modules/winston-daily-rotate-file
                                          
                                          parsejson  *
                                          Severity: high
                                          Regular Expression Denial of Service in parsejson - https://github.com/advisories/GHSA-q75g-2496-mxpp
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/parsejson
                                          
                                          redis  2.6.0 - 3.1.0
                                          Severity: high
                                          Node-Redis potential exponential regex in monitor mode - https://github.com/advisories/GHSA-35q2-47q7-3pc3
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/redis
                                          
                                          
                                          
                                          ws  <=1.1.4
                                          Severity: high
                                          Denial of Service in ws - https://github.com/advisories/GHSA-5v72-xg48-5rpm
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/engine.io-client/node_modules/ws
                                          node_modules/engine.io/node_modules/ws
                                          
                                          xmlhttprequest-ssl  <=1.6.1
                                          Severity: critical
                                          Improper Certificate Validation in xmlhttprequest-ssl - https://github.com/advisories/GHSA-72mh-269x-7mh5
                                          Arbitrary Code Injection - https://github.com/advisories/GHSA-h4j5-c7cj-74xg
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/xmlhttprequest-ssl
                                          
                                          yargs-parser  6.0.0 - 13.1.1
                                          Severity: moderate
                                          yargs-parser Vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-p9pc-299p-vxgp
                                          fix available via `npm audit fix --force`
                                          Will install iobroker.js-controller@4.0.23, which is a breaking change
                                          node_modules/yargs-parser
                                            yargs  8.0.0-candidate.0 - 12.0.5
                                            Depends on vulnerable versions of yargs-parser
                                            node_modules/yargs
                                          
                                          17 vulnerabilities (1 low, 4 moderate, 7 high, 5 critical)
                                          
                                          To address issues that do not require attention, run:
                                            npm audit fix
                                          
                                          To address all issues (including breaking changes), run:
                                            npm audit fix --force
                                          
                                          
                                          Thomas Braun 1 Reply Last reply Reply Quote 0
                                          • Thomas Braun
                                            Thomas Braun Most Active @lethuer last edited by

                                            @lethuer sagte in ioBroker node.js weicht von Kommandozeile ab:

                                            npm audit fix --force

                                            Finger weg! Das kramt dir alles auf links.

                                            lethuer 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post

                                            Support us

                                            ioBroker
                                            Community Adapters
                                            Donate
                                            FAQ Cloud / IOT
                                            HowTo: Node.js-Update
                                            HowTo: Backup/Restore
                                            Downloads
                                            BLOG

                                            716
                                            Online

                                            31.7k
                                            Users

                                            79.8k
                                            Topics

                                            1.3m
                                            Posts

                                            6
                                            59
                                            2999
                                            Loading More Posts
                                            • Oldest to Newest
                                            • Newest to Oldest
                                            • Most Votes
                                            Reply
                                            • Reply as topic
                                            Log in to reply
                                            Community
                                            Impressum | Datenschutz-Bestimmungen | Nutzungsbedingungen
                                            The ioBroker Community 2014-2023
                                            logo