# \#nodejs

**URL:** https://community.sonarsource.com/tag/nodejs/426.md

[Latest](https://community.sonarsource.com/latest.md) · [Categories](https://community.sonarsource.com/categories.md) · [Tags](https://community.sonarsource.com/tags.md)

---

## [False Negative: Arbitrary JSON file read in nodeJS](https://community.sonarsource.com/t/false-negative-arbitrary-json-file-read-in-nodejs/152987)

<div class="topic-metadata">

**Author:** [@rkg](https://community.sonarsource.com/u/rkg)\
**Replies:** 7\
**Last updated:** [December 11, 2025, 8:57am UTC](https://community.sonarsource.com/t/false-negative-arbitrary-json-file-read-in-nodejs/152987 "2025-12-11T08:57:41Z")

</div>

What language is this for? Typescript Which rule? ? Why do you believe it’s a false-positive/false-negative? We identified it as vulnerability but SonarQube doesn’t report it Are you using SonarQube Se…

---

## [\[SonarJS\]\[TypeScript\] Bridge server unresponsive blocks entire analysis](https://community.sonarsource.com/t/sonarjs-typescript-bridge-server-unresponsive-blocks-entire-analysis/148180)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Jinkala](https://community.sonarsource.com/u/Akhilesh_Jinkala)\
**Replies:** 1\
**Last updated:** [September 8, 2025, 11:47am UTC](https://community.sonarsource.com/t/sonarjs-typescript-bridge-server-unresponsive-blocks-entire-analysis/148180 "2025-09-08T11:47:08Z")

</div>

Must-share information Which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension): SonarQube Server: v2025.4.1 (build 111832), Developer Edition (zip install) So…

---

## [OutOfMemory errors ever since upgrading to node 20.19.3](https://community.sonarsource.com/t/outofmemory-errors-ever-since-upgrading-to-node-20-19-3/144327)

<div class="topic-metadata">

**Author:** [@Francis](https://community.sonarsource.com/u/Francis)\
**Replies:** 8\
**Last updated:** [July 24, 2025, 2:59pm UTC](https://community.sonarsource.com/t/outofmemory-errors-ever-since-upgrading-to-node-20-19-3/144327 "2025-07-24T14:59:47Z")

</div>

ALM used: Azure DevOps CI system used: Azure DevOps Languages of the repository: .net, nodejs+typescript Error observed: When running the pipeline outside of a PR, the SonarCloud analysis is falling with an O…

---

## [After updated to lates sonar version v25.2.0.102705 i am facing issue to run sonar scanner for node](https://community.sonarsource.com/t/after-updated-to-lates-sonar-version-v25-2-0-102705-i-am-facing-issue-to-run-sonar-scanner-for-node/135427)

<div class="topic-metadata">

**Author:** [@boobalan1503](https://community.sonarsource.com/u/boobalan1503)\
**Replies:** 5\
**Last updated:** [February 20, 2025, 1:14pm UTC](https://community.sonarsource.com/t/after-updated-to-lates-sonar-version-v25-2-0-102705-i-am-facing-issue-to-run-sonar-scanner-for-node/135427 "2025-02-20T13:14:49Z")

</div>

Hi All, Recently i updated my sonar to the latest version that v25.2.0.102705 i am using community build version while scan my node js source in my jenkins i am facing the below issue also i set the java environment var…

---

## [SonarQube for IDE: IntelliJ 10.13 - SonarQube Server 10.8, analyzers licences, extension performance](https://community.sonarsource.com/t/sonarqube-for-ide-intellij-10-13-sonarqube-server-10-8-analyzers-licences-extension-performance/131728)

<div class="topic-metadata">

**Author:** [@Farah](https://community.sonarsource.com/u/Farah)\
**Replies:** 0\
**Last updated:** [December 6, 2024, 2:08pm UTC](https://community.sonarsource.com/t/sonarqube-for-ide-intellij-10-13-sonarqube-server-10-8-analyzers-licences-extension-performance/131728 "2024-12-06T14:08:39Z")

</div>

Dear IntelliJ users, I’m happy to announce a new 10.13 version of SonarQube for IntelliJ! Following our recent rebranding, the updated labels and logos are now available inside the extension and in the JetBrains Market…

---

## [SonarLint fails to use Node.js from an alias or bash script. Node.js running from docker container](https://community.sonarsource.com/t/sonarlint-fails-to-use-node-js-from-an-alias-or-bash-script-node-js-running-from-docker-container/127716)

<div class="topic-metadata">

**Author:** [@sonarrr](https://community.sonarsource.com/u/sonarrr)\
**Replies:** 3\
**Last updated:** [November 15, 2024, 1:29pm UTC](https://community.sonarsource.com/t/sonarlint-fails-to-use-node-js-from-an-alias-or-bash-script-node-js-running-from-docker-container/127716 "2024-11-15T13:29:54Z")

</div>

Operating system: Linux Mint based on Ubuntu Bionic (old version backported with new libs, unable to upgrade atm) SonarLint plugin version: latest IntelliJ version: latest Programming language you’re coding in: PHP, Kot…

---

## [SSL issues with Sonar Scanner for NPM starting with Version 4.0.0 when using selfsigned certificate](https://community.sonarsource.com/t/ssl-issues-with-sonar-scanner-for-npm-starting-with-version-4-0-0-when-using-selfsigned-certificate/124061)

<div class="topic-metadata">

**Author:** [@majenny](https://community.sonarsource.com/u/majenny)\
**Replies:** 14\
**Last updated:** [October 15, 2024, 7:06am UTC](https://community.sonarsource.com/t/ssl-issues-with-sonar-scanner-for-npm-starting-with-version-4-0-0-when-using-selfsigned-certificate/124061 "2024-10-15T07:06:48Z")

</div>

Environment: – SonarQube: 9.9.6.92038 (Developer Edition) – Sonar Scanner CLI: 6.0.0.4432 – NPM sonarqube-scanner: 4.2.1 / 4.0.0 What I try to achieve: Run analysis with npm package sonarqube-scanner While lifecycli…

---

## [\`sonarqube-scanner@^4.0.0\` doesn't return non-zero exit code in case of Quality Gate failure](https://community.sonarsource.com/t/sonarqube-scanner-4-0-0-doesnt-return-non-zero-exit-code-in-case-of-quality-gate-failure/118755)

<div class="topic-metadata">

**Author:** [@maks-rafalko](https://community.sonarsource.com/u/maks-rafalko)\
**Replies:** 2\
**Last updated:** [August 16, 2024, 8:57am UTC](https://community.sonarsource.com/t/sonarqube-scanner-4-0-0-doesnt-return-non-zero-exit-code-in-case-of-quality-gate-failure/118755 "2024-08-16T08:57:33Z")

</div>

SonarQube: Developer Edition v10.5.1 (90531) sonarqube-scanner version: 4.0.0 or 4.0.1 Used npm package: sonarqube-scanner - npm When we run it as npx sonarqube-scanner@^4.0.0 -Dsonar.qualitygate.wait="true" \[....\] w…

---

## [Please provide a sonar-javascript-plugin without bundled nodejs runtimes](https://community.sonarsource.com/t/please-provide-a-sonar-javascript-plugin-without-bundled-nodejs-runtimes/115711)

<div class="topic-metadata">

**Author:** [@anon67236913](https://community.sonarsource.com/u/anon67236913)\
**Replies:** 3\
**Last updated:** [May 23, 2024, 8:24am UTC](https://community.sonarsource.com/t/please-provide-a-sonar-javascript-plugin-without-bundled-nodejs-runtimes/115711 "2024-05-23T08:24:35Z")

</div>

Hi, the problem that the Sonarqube-Scanner simply downloads ALL plugins from Sonarqube, has improved crucially - thanks for the " Analyzers loading optimization" :pray: But there’s still a problem with the large files…
