Build log
nerves_system_x86_64
ash_pyro_components 0.1.0 · fail · run ash_pyro_components-0.1.0-1789839080805
318 of 318 lines
1Resolving Hex dependencies...2Resolution completed in 1.167s3Unchanged:4 ash 2.21.15 VULNERABLE!5 EEF-CVE-2026-82739 (LOW)6 aka: CVE-2026-82739, GHSA-66cg-vj5m-8w7v7 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error8 https://osv.dev/vulnerability/EEF-CVE-2026-82739910 EEF-CVE-2025-48043 (HIGH)11 aka: CVE-2025-48043, GHSA-7r7f-9xpj-jmr712 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization13 https://osv.dev/vulnerability/EEF-CVE-2025-480431415 GHSA-jjf9-w5vj-r6vp (HIGH)16 aka: CVE-2026-3459317 Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash18 https://osv.dev/vulnerability/GHSA-jjf9-w5vj-r6vp1920 EEF-CVE-2025-48042 (HIGH)21 aka: CVE-2025-48042, GHSA-jj4j-x5ww-cwh922 Before action hooks may execute in certain scenarios despite a request being forbidden23 https://osv.dev/vulnerability/EEF-CVE-2025-480422425 EEF-CVE-2026-67579 (HIGH)26 aka: CVE-2026-67579, GHSA-3gq3-9xm3-c8v327 Filter expression injection via forged keyset pagination cursor in Ash28 https://osv.dev/vulnerability/EEF-CVE-2026-675792930 EEF-CVE-2026-82736 (LOW)31 aka: CVE-2026-82736, GHSA-gg9w-7593-hxg932 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass33 https://osv.dev/vulnerability/EEF-CVE-2026-827363435 EEF-CVE-2026-86338 (MEDIUM)36 aka: CVE-2026-86338, GHSA-7qr8-wrvq-566q37 Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle38 https://osv.dev/vulnerability/EEF-CVE-2026-863383940 EEF-CVE-2026-82734 (LOW)41 aka: CVE-2026-82734, GHSA-mvvh-q33h-q62v42 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal43 https://osv.dev/vulnerability/EEF-CVE-2026-827344445 EEF-CVE-2026-69659 (MEDIUM)46 aka: CVE-2026-69659, GHSA-j35q-v8h8-7mwq47 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset48 https://osv.dev/vulnerability/EEF-CVE-2026-696594950 EEF-CVE-2026-82752 (MEDIUM)51 aka: CVE-2026-82752, GHSA-cwjv-574p-59f652 Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length53 https://osv.dev/vulnerability/EEF-CVE-2026-827525455 EEF-CVE-2026-82741 (LOW)56 aka: CVE-2026-82741, GHSA-2mmm-gc86-7jgg57 Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion58 https://osv.dev/vulnerability/EEF-CVE-2026-827415960 EEF-CVE-2026-70395 (LOW)61 aka: CVE-2026-70395, GHSA-vvp6-3wv6-833j62 Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash63 https://osv.dev/vulnerability/EEF-CVE-2026-703956465 EEF-CVE-2026-82742 (MEDIUM)66 aka: CVE-2026-82742, GHSA-mgwj-c69v-6f8367 Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory68 https://osv.dev/vulnerability/EEF-CVE-2026-827426970 EEF-CVE-2026-82745 (MEDIUM)71 aka: CVE-2026-82745, GHSA-92x7-q3h5-wf8872 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness73 https://osv.dev/vulnerability/EEF-CVE-2026-827457475 EEF-CVE-2026-82743 (LOW)76 aka: CVE-2026-82743, GHSA-33wq-x3q2-c92h77 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads78 https://osv.dev/vulnerability/EEF-CVE-2026-827437980 EEF-CVE-2026-82735 (MEDIUM)81 aka: CVE-2026-82735, GHSA-mq7g-pffw-m8xh82 Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service83 https://osv.dev/vulnerability/EEF-CVE-2026-827358485 EEF-CVE-2026-82740 (LOW)86 aka: CVE-2026-82740, GHSA-v29m-p28g-w5fc87 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs88 https://osv.dev/vulnerability/EEF-CVE-2026-827408990 EEF-CVE-2026-82737 (MEDIUM)91 aka: CVE-2026-82737, GHSA-68q3-w4w3-2gfv92 Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads93 https://osv.dev/vulnerability/EEF-CVE-2026-8273794 ash_phoenix 1.3.7 VULNERABLE!95 EEF-CVE-2026-82725 (LOW)96 aka: CVE-2026-82725, GHSA-7xhg-xphm-f45897 AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data98 https://osv.dev/vulnerability/EEF-CVE-2026-8272599100 EEF-CVE-2026-82727 (LOW)101 aka: CVE-2026-82727, GHSA-5xf4-hgcq-xw7v102 AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message103 https://osv.dev/vulnerability/EEF-CVE-2026-82727104 ash_pyro 0.2.1105 ash_pyro_components 0.1.0106 castore 1.0.21107 circular_buffer 1.1.0108 comparable 1.0.0109 decimal 2.4.1 VULNERABLE!110 EEF-CVE-2026-32686 (MEDIUM)111 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v112 Unbounded exponent in decimal enables unauthenticated DoS113 https://osv.dev/vulnerability/EEF-CVE-2026-32686114 earmark 1.4.49 RETIRED! VULNERABLE!115 (deprecated) Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).116117 EEF-CVE-2026-48591 (MEDIUM)118 aka: CVE-2026-48591, GHSA-52mm-h59v-f3c7119 Stored XSS via unescaped HTML attribute values in earmark120 https://osv.dev/vulnerability/EEF-CVE-2026-48591121 ecto 3.13.6122 elixir_make 0.10.0123 ets 0.9.0124 interactive_cmd 0.1.4125 jason 1.4.5126 libgraph 0.16.0127 mime 2.0.7128 nerves 1.15.0129 nerves_discovery 0.1.5130 nerves_logging 0.2.4131 nerves_runtime 0.13.13132 nerves_system_bbb 2.30.2133 nerves_system_br 1.34.4134 nerves_system_mangopi_mq_pro 0.17.2135 nerves_system_qemu_aarch64 0.4.2136 nerves_system_rpi 2.1.2137 nerves_system_rpi0 2.1.2138 nerves_system_rpi0_2 2.1.2139 nerves_system_rpi2 2.1.2140 nerves_system_rpi3 2.1.2141 nerves_system_rpi4 2.1.2142 nerves_system_rpi5 2.1.2143 nerves_system_x86_64 1.34.2144 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1145 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1146 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1147 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1148 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1149 nerves_uevent 0.1.7150 nimble_options 1.1.1151 phoenix 1.7.24152 phoenix_html 4.3.0153 phoenix_live_view 0.20.17 VULNERABLE!154 EEF-CVE-2026-64941 (LOW)155 aka: CVE-2026-64941, GHSA-36m4-rm57-3prf156 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR157 https://osv.dev/vulnerability/EEF-CVE-2026-64941158 phoenix_pubsub 2.3.0159 phoenix_template 1.0.4160 picosat_elixir 0.2.3161 plug 1.20.3162 plug_crypto 2.2.0163 property_table 0.3.4164 pyro 0.3.7165 pyro_components 0.1.1166 reactor 0.7.0167 ring_logger 0.11.7168 shoehorn 0.9.3169 sourceror 1.12.3170 spark 1.1.55171 stream_data 0.6.0172 tablet 0.3.3173 telemetry 1.4.2174 toolshed 0.5.0175 typable 0.3.0176 uboot_env 1.0.2177 websock 0.5.3178 websock_adapter 0.5.9179* Getting ash_pyro_components (Hex package)180* Getting nerves (Hex package)181* Getting shoehorn (Hex package)182* Getting ring_logger (Hex package)183* Getting toolshed (Hex package)184* Getting nerves_runtime (Hex package)185* Getting nerves_system_bbb (Hex package)186* Getting nerves_system_mangopi_mq_pro (Hex package)187* Getting nerves_system_qemu_aarch64 (Hex package)188* Getting nerves_system_rpi (Hex package)189* Getting nerves_system_rpi0 (Hex package)190* Getting nerves_system_rpi0_2 (Hex package)191* Getting nerves_system_rpi2 (Hex package)192* Getting nerves_system_rpi3 (Hex package)193* Getting nerves_system_rpi4 (Hex package)194* Getting nerves_system_rpi5 (Hex package)195* Getting nerves_system_x86_64 (Hex package)196* Getting nerves_system_br (Hex package)197* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)198* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)199* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)200* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)201* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)202* Getting nerves_logging (Hex package)203* Getting nerves_uevent (Hex package)204* Getting uboot_env (Hex package)205* Getting elixir_make (Hex package)206* Getting property_table (Hex package)207* Getting circular_buffer (Hex package)208* Getting interactive_cmd (Hex package)209* Getting jason (Hex package)210* Getting nerves_discovery (Hex package)211* Getting tablet (Hex package)212* Getting ash (Hex package)213* Getting ash_phoenix (Hex package)214* Getting ash_pyro (Hex package)215* Getting phoenix (Hex package)216* Getting phoenix_live_view (Hex package)217* Getting pyro (Hex package)218* Getting pyro_components (Hex package)219* Getting ecto (Hex package)220* Getting decimal (Hex package)221* Getting telemetry (Hex package)222* Getting phoenix_html (Hex package)223* Getting phoenix_template (Hex package)224* Getting plug (Hex package)225* Getting mime (Hex package)226* Getting plug_crypto (Hex package)227* Getting castore (Hex package)228* Getting phoenix_pubsub (Hex package)229* Getting websock_adapter (Hex package)230* Getting websock (Hex package)231* Getting comparable (Hex package)232* Getting earmark (Hex package)233* Getting ets (Hex package)234* Getting picosat_elixir (Hex package)235* Getting reactor (Hex package)236* Getting spark (Hex package)237* Getting stream_data (Hex package)238* Getting nimble_options (Hex package)239* Getting sourceror (Hex package)240* Getting libgraph (Hex package)241* Getting typable (Hex package)242Found retired packages, see above for details243Found packages with security advisories, see above for details244You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more245==> tablet246Compiling 2 files (.ex)247Generated tablet app248==> elixir_make249Compiling 8 files (.ex)250Generated elixir_make app251==> nerves_discovery252Compiling 5 files (.ex)253Generated nerves_discovery app254==> decimal255Compiling 4 files (.ex)256 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)257 │258 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity259 │ ~260 │261 └─ lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1262263Generated decimal app264==> jason265Compiling 10 files (.ex)266Generated jason app267==> interactive_cmd268Compiling 1 file (.ex)269Generated interactive_cmd app270==> nerves271HOST_CC port.o272HOST_LD port273Compiling 55 files (.ex)274Generated nerves app275==> nerves_compatibility_test276277Nerves environment278 MIX_TARGET: x86_64279 MIX_ENV: prod280281Checking for prebuilt Nerves artifacts...282 Found nerves_toolchain_x86_64_nerves_linux_musl in cache283 /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1284 Found nerves_system_x86_64 in cache285 /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2286==> decimal287 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)288 │289 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity290 │ ~291 │292 └─ (decimal 2.4.1) lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1293294==> nerves295==> nerves_compatibility_test296297Nerves environment298 MIX_TARGET: x86_64299 MIX_ENV: prod300301==> picosat_elixir302/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c303/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat_nif.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat_nif.c304/work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c:8150:10: fatal error: sys/unistd.h: No such file or directory305 8150 | #include <sys/unistd.h>306 | ^~~~~~~~~~~~~~307compilation terminated.308make: *** [Makefile:49: /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o] Error 1309make: *** Waiting for unfinished jobs....310could not compile dependency :picosat_elixir, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile picosat_elixir --force", update it with "mix deps.update picosat_elixir" or clean it with "mix deps.clean picosat_elixir"311==> nerves_compatibility_test312** (Mix) Could not compile with "make" (exit status: 2).313You need to have gcc and make installed. If you are using314Ubuntu or any other Debian-based system, install the packages315"build-essential". Also install "erlang-dev" package if not316included in your Erlang/OTP version. If you're on Fedora, run317"dnf group install 'Development Tools'".318