nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.38s3Unchanged:4  circular_buffer 1.1.05  combine 0.10.06  curator 0.1.07  curator_registerable 0.1.08  decimal 1.9.0 VULNERABLE!9    EEF-CVE-2026-32686 (MEDIUM)10    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v11    Unbounded exponent in decimal enables unauthenticated DoS12    https://osv.dev/vulnerability/EEF-CVE-2026-3268613  ecto 2.2.1214  elixir_make 0.10.015  elixir_uuid 1.2.116  expo 1.1.117  gettext 0.26.218  guardian 0.14.6 VULNERABLE!19    EEF-CVE-2026-54894 (MEDIUM)20    aka: CVE-2026-54894, GHSA-xqch-c77q-rgh521    Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys22    https://osv.dev/vulnerability/EEF-CVE-2026-5489423  interactive_cmd 0.1.424  jose 1.11.1225  mime 1.6.026  nerves 2.0.0-pre.227  nerves_discovery 0.1.528  nerves_logging 0.2.429  nerves_runtime 0.13.1330  nerves_system_bbb 2.30.231  nerves_system_br 1.34.432  nerves_system_mangopi_mq_pro 0.17.233  nerves_system_qemu_aarch64 0.4.234  nerves_system_rpi0 2.1.235  nerves_system_rpi4 2.1.236  nerves_system_rpi5 2.1.237  nerves_system_trellis 0.5.038  nerves_system_x86_64 1.34.239  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.140  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.141  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.142  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.143  nerves_toolchain_x86_64_nerves_linux_musl 15.3.144  nerves_uevent 0.1.745  phoenix 1.2.5 VULNERABLE!46    GHSA-p8f7-22gq-m7j9 (HIGH)47    aka: CVE-2022-4297548    Phoenix before 1.6.14 mishandles check_origin wildcarding49    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j95051    EEF-CVE-2026-56812 (MEDIUM)52    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr53    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff54    https://osv.dev/vulnerability/EEF-CVE-2026-568125556    EEF-CVE-2026-56811 (HIGH)57    aka: CVE-2026-56811, GHSA-6983-jfq8-485w58    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service59    https://osv.dev/vulnerability/EEF-CVE-2026-5681160  phoenix_pubsub 1.1.261  plug 1.3.6 VULNERABLE!62    EEF-CVE-2026-56813 (LOW)63    aka: CVE-2026-56813, GHSA-wpmj-jh88-rpgm64    Cookie attribute injection in Plug.Conn.Cookies.encode/265    https://osv.dev/vulnerability/EEF-CVE-2026-5681366  poison 2.2.067  poolboy 1.5.268  property_table 0.3.469  ring_logger 0.11.770  tablet 0.3.371  timex 3.7.1372  timex_ecto 3.4.073  toolshed 0.5.074  tzdata 1.2.275  uboot_env 1.0.276* Getting curator_registerable (Hex package)77* Getting nerves (Hex package)78* Getting ring_logger (Hex package)79* Getting toolshed (Hex package)80* Getting nerves_runtime (Hex package)81* Getting nerves_system_bbb (Hex package)82* Getting nerves_system_mangopi_mq_pro (Hex package)83* Getting nerves_system_qemu_aarch64 (Hex package)84* Getting nerves_system_rpi0 (Hex package)85* Getting nerves_system_rpi4 (Hex package)86* Getting nerves_system_rpi5 (Hex package)87* Getting nerves_system_trellis (Hex package)88* Getting nerves_system_x86_64 (Hex package)89* Getting nerves_system_br (Hex package)90* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)91* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)92* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)93* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)94* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)95* Getting nerves_logging (Hex package)96* Getting nerves_uevent (Hex package)97* Getting uboot_env (Hex package)98* Getting elixir_make (Hex package)99* Getting property_table (Hex package)100* Getting circular_buffer (Hex package)101* Getting interactive_cmd (Hex package)102* Getting nerves_discovery (Hex package)103* Getting tablet (Hex package)104* Getting curator (Hex package)105* Getting ecto (Hex package)106* Getting decimal (Hex package)107* Getting poolboy (Hex package)108* Getting guardian (Hex package)109* Getting phoenix (Hex package)110* Getting plug (Hex package)111* Getting timex (Hex package)112* Getting timex_ecto (Hex package)113* Getting combine (Hex package)114* Getting gettext (Hex package)115* Getting tzdata (Hex package)116* Getting expo (Hex package)117* Getting mime (Hex package)118* Getting phoenix_pubsub (Hex package)119* Getting poison (Hex package)120* Getting elixir_uuid (Hex package)121* Getting jose (Hex package)122Found packages with security advisories, see above for details123    warning: String.strip/1 is deprecated. Use String.trim/1 instead124    │125  4 │   @version File.read!("VERSION") |> String.strip126    │                                            ~127    │128    └─ /work/proj/deps_trellis/poison/mix.exs:4:44: Poison.Mixfile (module)129130    error: undefined variable "deps"131    │132 17 │       deps: deps,133    │             ^^^^134    │135    └─ /work/proj/deps_trellis/curator/mix.exs:17:13: Curator.Mixfile.project/0136137Error while loading project :curator at /work/proj/deps_trellis/curator138** (CompileError) deps_trellis/curator/mix.exs: cannot compile module Curator.Mixfile (errors have been logged)139