ash_thrift

Build log

nerves_system_x86_64

ash_thrift 0.2.0 · fail · run ash_thrift-0.2.0-1789860506686
275 of 275 lines
1Resolving Hex dependencies...2Resolution completed in 0.593s3Unchanged:4  ash 2.21.15 VULNERABLE!5    EEF-CVE-2026-82739 (LOW)6    aka: CVE-2026-82739, GHSA-66cg-vj5m-8w7v7    Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error8    https://osv.dev/vulnerability/EEF-CVE-2026-82739910    EEF-CVE-2025-48043 (HIGH)11    aka: CVE-2025-48043, GHSA-7r7f-9xpj-jmr712    Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization13    https://osv.dev/vulnerability/EEF-CVE-2025-480431415    GHSA-jjf9-w5vj-r6vp (HIGH)16    aka: CVE-2026-3459317    Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash18    https://osv.dev/vulnerability/GHSA-jjf9-w5vj-r6vp1920    EEF-CVE-2025-48042 (HIGH)21    aka: CVE-2025-48042, GHSA-jj4j-x5ww-cwh922    Before action hooks may execute in certain scenarios despite a request being forbidden23    https://osv.dev/vulnerability/EEF-CVE-2025-480422425    EEF-CVE-2026-67579 (HIGH)26    aka: CVE-2026-67579, GHSA-3gq3-9xm3-c8v327    Filter expression injection via forged keyset pagination cursor in Ash28    https://osv.dev/vulnerability/EEF-CVE-2026-675792930    EEF-CVE-2026-82736 (LOW)31    aka: CVE-2026-82736, GHSA-gg9w-7593-hxg932    Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass33    https://osv.dev/vulnerability/EEF-CVE-2026-827363435    EEF-CVE-2026-86338 (MEDIUM)36    aka: CVE-2026-86338, GHSA-7qr8-wrvq-566q37    Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle38    https://osv.dev/vulnerability/EEF-CVE-2026-863383940    EEF-CVE-2026-82734 (LOW)41    aka: CVE-2026-82734, GHSA-mvvh-q33h-q62v42    Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal43    https://osv.dev/vulnerability/EEF-CVE-2026-827344445    EEF-CVE-2026-69659 (MEDIUM)46    aka: CVE-2026-69659, GHSA-j35q-v8h8-7mwq47    Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset48    https://osv.dev/vulnerability/EEF-CVE-2026-696594950    EEF-CVE-2026-82752 (MEDIUM)51    aka: CVE-2026-82752, GHSA-cwjv-574p-59f652    Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length53    https://osv.dev/vulnerability/EEF-CVE-2026-827525455    EEF-CVE-2026-82741 (LOW)56    aka: CVE-2026-82741, GHSA-2mmm-gc86-7jgg57    Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion58    https://osv.dev/vulnerability/EEF-CVE-2026-827415960    EEF-CVE-2026-70395 (LOW)61    aka: CVE-2026-70395, GHSA-vvp6-3wv6-833j62    Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash63    https://osv.dev/vulnerability/EEF-CVE-2026-703956465    EEF-CVE-2026-82742 (MEDIUM)66    aka: CVE-2026-82742, GHSA-mgwj-c69v-6f8367    Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory68    https://osv.dev/vulnerability/EEF-CVE-2026-827426970    EEF-CVE-2026-82745 (MEDIUM)71    aka: CVE-2026-82745, GHSA-92x7-q3h5-wf8872    ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness73    https://osv.dev/vulnerability/EEF-CVE-2026-827457475    EEF-CVE-2026-82743 (LOW)76    aka: CVE-2026-82743, GHSA-33wq-x3q2-c92h77    Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads78    https://osv.dev/vulnerability/EEF-CVE-2026-827437980    EEF-CVE-2026-82735 (MEDIUM)81    aka: CVE-2026-82735, GHSA-mq7g-pffw-m8xh82    Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service83    https://osv.dev/vulnerability/EEF-CVE-2026-827358485    EEF-CVE-2026-82740 (LOW)86    aka: CVE-2026-82740, GHSA-v29m-p28g-w5fc87    Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs88    https://osv.dev/vulnerability/EEF-CVE-2026-827408990    EEF-CVE-2026-82737 (MEDIUM)91    aka: CVE-2026-82737, GHSA-68q3-w4w3-2gfv92    Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads93    https://osv.dev/vulnerability/EEF-CVE-2026-8273794  ash_thrift 0.2.095  circular_buffer 1.1.096  comparable 1.0.097  decimal 2.4.1 VULNERABLE!98    EEF-CVE-2026-32686 (MEDIUM)99    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v100    Unbounded exponent in decimal enables unauthenticated DoS101    https://osv.dev/vulnerability/EEF-CVE-2026-32686102  earmark 1.4.49 RETIRED! VULNERABLE!103    (deprecated) Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).104105    EEF-CVE-2026-48591 (MEDIUM)106    aka: CVE-2026-48591, GHSA-52mm-h59v-f3c7107    Stored XSS via unescaped HTML attribute values in earmark108    https://osv.dev/vulnerability/EEF-CVE-2026-48591109  ecto 3.13.6110  elixir_make 0.10.0111  ets 0.9.0112  interactive_cmd 0.1.4113  jason 1.4.5114  libgraph 0.16.0115  nerves 1.15.0116  nerves_discovery 0.1.5117  nerves_logging 0.2.4118  nerves_runtime 0.13.13119  nerves_system_bbb 2.30.2120  nerves_system_br 1.34.4121  nerves_system_mangopi_mq_pro 0.17.2122  nerves_system_qemu_aarch64 0.4.2123  nerves_system_rpi 2.1.2124  nerves_system_rpi0 2.1.2125  nerves_system_rpi0_2 2.1.2126  nerves_system_rpi2 2.1.2127  nerves_system_rpi3 2.1.2128  nerves_system_rpi4 2.1.2129  nerves_system_rpi5 2.1.2130  nerves_system_x86_64 1.34.2131  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1132  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1133  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1134  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1135  nerves_toolchain_x86_64_nerves_linux_musl 15.3.1136  nerves_uevent 0.1.7137  nimble_options 1.1.1138  picosat_elixir 0.2.3139  property_table 0.3.4140  reactor 0.7.0141  ring_logger 0.11.7142  shoehorn 0.9.3143  sourceror 1.12.3144  spark 1.1.55145  stream_data 0.6.0146  tablet 0.3.3147  telemetry 1.4.2148  toolshed 0.5.0149  typable 0.3.0150  uboot_env 1.0.2151* Getting ash_thrift (Hex package)152* Getting nerves (Hex package)153* Getting shoehorn (Hex package)154* Getting ring_logger (Hex package)155* Getting toolshed (Hex package)156* Getting nerves_runtime (Hex package)157* Getting nerves_system_bbb (Hex package)158* Getting nerves_system_mangopi_mq_pro (Hex package)159* Getting nerves_system_qemu_aarch64 (Hex package)160* Getting nerves_system_rpi (Hex package)161* Getting nerves_system_rpi0 (Hex package)162* Getting nerves_system_rpi0_2 (Hex package)163* Getting nerves_system_rpi2 (Hex package)164* Getting nerves_system_rpi3 (Hex package)165* Getting nerves_system_rpi4 (Hex package)166* Getting nerves_system_rpi5 (Hex package)167* Getting nerves_system_x86_64 (Hex package)168* Getting nerves_system_br (Hex package)169* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)170* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)171* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)172* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)173* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)174* Getting nerves_logging (Hex package)175* Getting nerves_uevent (Hex package)176* Getting uboot_env (Hex package)177* Getting elixir_make (Hex package)178* Getting property_table (Hex package)179* Getting circular_buffer (Hex package)180* Getting interactive_cmd (Hex package)181* Getting jason (Hex package)182* Getting nerves_discovery (Hex package)183* Getting tablet (Hex package)184* Getting ash (Hex package)185* Getting comparable (Hex package)186* Getting decimal (Hex package)187* Getting earmark (Hex package)188* Getting ecto (Hex package)189* Getting ets (Hex package)190* Getting picosat_elixir (Hex package)191* Getting reactor (Hex package)192* Getting spark (Hex package)193* Getting stream_data (Hex package)194* Getting telemetry (Hex package)195* Getting nimble_options (Hex package)196* Getting sourceror (Hex package)197* Getting libgraph (Hex package)198* Getting typable (Hex package)199Found retired packages, see above for details200Found packages with security advisories, see above for details201You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more202==> tablet203Compiling 2 files (.ex)204Generated tablet app205==> elixir_make206Compiling 8 files (.ex)207Generated elixir_make app208==> nerves_discovery209Compiling 5 files (.ex)210Generated nerves_discovery app211==> decimal212Compiling 4 files (.ex)213      warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)214      │215 2842 │   defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity216      │        ~217      │218      └─ lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1219220Generated decimal app221==> jason222Compiling 10 files (.ex)223Generated jason app224==> interactive_cmd225Compiling 1 file (.ex)226Generated interactive_cmd app227==> nerves228HOST_CC port.o229HOST_LD port230Compiling 55 files (.ex)231Generated nerves app232==> nerves_compatibility_test233234Nerves environment235  MIX_TARGET:   x86_64236  MIX_ENV:      prod237238Checking for prebuilt Nerves artifacts...239  Found nerves_toolchain_x86_64_nerves_linux_musl in cache240    /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1241  Found nerves_system_x86_64 in cache242    /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2243==> decimal244      warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)245      │246 2842 │   defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity247      │        ~248      │249      └─ (decimal 2.4.1) lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1250251==> nerves252==> nerves_compatibility_test253254Nerves environment255  MIX_TARGET:   x86_64256  MIX_ENV:      prod257258==> picosat_elixir259/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c260/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat_nif.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat_nif.c261/work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c:8150:10: fatal error: sys/unistd.h: No such file or directory262 8150 | #include <sys/unistd.h>263      |          ^~~~~~~~~~~~~~264compilation terminated.265make: *** [Makefile:49: /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o] Error 1266make: *** Waiting for unfinished jobs....267could not compile dependency :picosat_elixir, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile picosat_elixir --force", update it with "mix deps.update picosat_elixir" or clean it with "mix deps.clean picosat_elixir"268==> nerves_compatibility_test269** (Mix) Could not compile with "make" (exit status: 2).270You need to have gcc and make installed. If you are using271Ubuntu or any other Debian-based system, install the packages272"build-essential". Also install "erlang-dev" package if not273included in your Erlang/OTP version. If you're on Fedora, run274"dnf group install 'Development Tools'".275