is it possible for someone to run node js server on my server without my permission

I have website which allow the user to run there html file on it ,

I have filtered all php and executable file for security reasons

for me I have zero of knowledge about node js server

is it possible for anyone to upload his files as node js project and execute

something on the server ? ? and if yes , how to prevent that ? ?

my server is Ubuntu ,Apache

via alia