nerves_system_mangopi_mq_pro

1Resolving Hex dependencies...2Resolution completed in 0.202s3Unchanged:4  circular_buffer 1.1.05  cowboy 1.1.2 VULNERABLE!6    GHSA-w4f7-4cxr-rv3c (MEDIUM)7    aka: CVE-2026-43966, EEF-CVE-2026-439668    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability9    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c10  cowlib 1.0.2 VULNERABLE!11    EEF-CVE-2026-7790 (HIGH)12    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6513    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS14    https://osv.dev/vulnerability/EEF-CVE-2026-77901516    EEF-CVE-2026-43970 (HIGH)17    aka: CVE-2026-43970, GHSA-84f2-rp86-235p18    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame19    https://osv.dev/vulnerability/EEF-CVE-2026-4397020  decimal 1.9.0 VULNERABLE!21    EEF-CVE-2026-32686 (MEDIUM)22    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v23    Unbounded exponent in decimal enables unauthenticated DoS24    https://osv.dev/vulnerability/EEF-CVE-2026-3268625  deppie 1.1.226  drab 0.6.327  drab_pagination 0.1.028  ecto 2.2.1229  elixir_make 0.10.030  expo 1.1.131  floki 0.18.132  gettext 0.26.233  global_flags 1.0.034  interactive_cmd 0.1.435  mime 2.0.736  mochiweb 2.22.037  nerves 2.0.0-pre.238  nerves_discovery 0.1.539  nerves_logging 0.2.440  nerves_runtime 0.13.1341  nerves_system_bbb 2.30.242  nerves_system_br 1.34.443  nerves_system_mangopi_mq_pro 0.17.244  nerves_system_qemu_aarch64 0.4.245  nerves_system_rpi0 2.1.246  nerves_system_rpi4 2.1.247  nerves_system_rpi5 2.1.248  nerves_system_trellis 0.5.049  nerves_system_x86_64 1.34.250  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.151  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.152  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.153  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.154  nerves_toolchain_x86_64_nerves_linux_musl 15.3.155  nerves_uevent 0.1.756  phoenix 1.4.6 VULNERABLE!57    EEF-CVE-2026-56812 (MEDIUM)58    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr59    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff60    https://osv.dev/vulnerability/EEF-CVE-2026-568126162    EEF-CVE-2026-56811 (HIGH)63    aka: CVE-2026-56811, GHSA-6983-jfq8-485w64    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service65    https://osv.dev/vulnerability/EEF-CVE-2026-568116667    GHSA-p8f7-22gq-m7j9 (HIGH)68    aka: CVE-2022-4297569    Phoenix before 1.6.14 mishandles check_origin wildcarding70    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j971  phoenix_html 2.14.3 VULNERABLE!72    GHSA-5g2h-9x5v-5h3x (MEDIUM)73    aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q274    phoenix_html allows Cross-site Scripting in HEEx class attributes75    https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x76  phoenix_pubsub 1.1.277  plug 1.20.378  plug_crypto 2.2.079  poolboy 1.5.280  property_table 0.3.481  ranch 1.3.282  ring_logger 0.11.783  tablet 0.3.384  telemetry 1.4.285  toolshed 0.5.086  uboot_env 1.0.287* Getting drab_pagination (Hex package)88* Getting nerves (Hex package)89* Getting ring_logger (Hex package)90* Getting toolshed (Hex package)91* Getting nerves_runtime (Hex package)92* Getting nerves_system_bbb (Hex package)93* Getting nerves_system_mangopi_mq_pro (Hex package)94* Getting nerves_system_qemu_aarch64 (Hex package)95* Getting nerves_system_rpi0 (Hex package)96* Getting nerves_system_rpi4 (Hex package)97* Getting nerves_system_rpi5 (Hex package)98* Getting nerves_system_trellis (Hex package)99* Getting nerves_system_x86_64 (Hex package)100* Getting nerves_system_br (Hex package)101* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)102* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)103* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)104* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)105* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)106* Getting nerves_logging (Hex package)107* Getting nerves_uevent (Hex package)108* Getting uboot_env (Hex package)109* Getting elixir_make (Hex package)110* Getting property_table (Hex package)111* Getting circular_buffer (Hex package)112* Getting interactive_cmd (Hex package)113* Getting nerves_discovery (Hex package)114* Getting tablet (Hex package)115* Getting drab (Hex package)116* Getting ecto (Hex package)117* Getting decimal (Hex package)118* Getting poolboy (Hex package)119* Getting cowboy (Hex package)120* Getting deppie (Hex package)121* Getting floki (Hex package)122* Getting gettext (Hex package)123* Getting phoenix (Hex package)124* Getting phoenix_html (Hex package)125* Getting phoenix_pubsub (Hex package)126* Getting plug (Hex package)127* Getting mime (Hex package)128* Getting plug_crypto (Hex package)129* Getting telemetry (Hex package)130* Getting expo (Hex package)131* Getting mochiweb (Hex package)132* Getting global_flags (Hex package)133* Getting cowlib (Hex package)134* Getting ranch (Hex package)135Found packages with security advisories, see above for details136==> nerves_system_br137Generated nerves_system_br app138==> mime139Compiling 1 file (.ex)140Generated mime app141==> circular_buffer142Compiling 1 file (.ex)143Generated circular_buffer app144==> plug_crypto145Compiling 5 files (.ex)146Generated plug_crypto app147==> nerves_compatibility_test148===> Analyzing applications...149===> Compiling ranch150    ┌─ src/ranch_conns_sup.erl:151    │152 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},153    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.154Compile directive 'nowarn_deprecated_catch' can be used to suppress155warnings in selected modules.156157158     ┌─ src/ranch_ssl.erl:159     │160 128 │  	case ssl:ssl_accept(CSocket, Timeout) of161     │  	     ╰── Warning: ssl:ssl_accept/2 is removed; use ssl:handshake/1,2,3 instead162163     ┌─ src/ranch_ssl.erl:164     │165 233 │  			end, ssl:cipher_suites());166     │  			     ╰── Warning: ssl:cipher_suites/0 is removed; use ssl:cipher_suites/2,3 instead167168     ┌─ src/ranch_ssl.erl:169     │170 235 │  			ssl:cipher_suites()171     │  			╰── Warning: ssl:cipher_suites/0 is removed; use ssl:cipher_suites/2,3 instead172173174    ┌─ src/ranch.erl:175    │176 73 │  					catch Transport:controlling_process(Socket, AcceptorsSup);177    │  					╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.178Compile directive 'nowarn_deprecated_catch' can be used to suppress179warnings in selected modules.180181182==> tablet183Compiling 2 files (.ex)184Generated tablet app185==> elixir_make186Compiling 8 files (.ex)187Generated elixir_make app188==> nerves_logging189 CC kmsg_tailer.o190 LD kmsg_tailer191Compiling 5 files (.ex)192Generated nerves_logging app193==> nerves_compatibility_test194===> Analyzing applications...195===> Compiling mochiweb196===> Compiling src/mochiweb_multipart.erl failed197     ┌─ src/mochiweb_multipart.erl:198     │199 278 │        {maybe, Start} ->200     │              ╰── syntax error before: ','201202     ┌─ src/mochiweb_multipart.erl:203     │204 331 │  		{maybe, Skip};205     │  		      ╰── syntax error before: ','206207208     ┌─ src/mochiweb_multipart.erl:209     │210 186 │      feed_mp(headers,211     │      ╰── function feed_mp/2 undefined212213214     ┌─ src/mochiweb_multipart.erl:215     │216 191 │  parse_headers(<<>>) -> [];217     │  ╰── Warning: function parse_headers/1 is unused218219     ┌─ src/mochiweb_multipart.erl:220     │221 194 │  parse_headers(Binary, Acc) ->222     │  ╰── Warning: function parse_headers/2 is unused223224     ┌─ src/mochiweb_multipart.erl:225     │226 202 │  split_header(Line) ->227     │  ╰── Warning: function split_header/1 is unused228229     ┌─ src/mochiweb_multipart.erl:230     │231 217 │  read_more(State = #mp{length = Length, buffer = Buffer,232     │  ╰── Warning: function read_more/1 is unused233234     ┌─ src/mochiweb_multipart.erl:235     │236 300 │  find_in_binary(P, Data) when size(P) > 0 ->237     │  ╰── Warning: function find_in_binary/2 is unused238239     ┌─ src/mochiweb_multipart.erl:240     │241 312 │  partial_find(_B, _D, _N, 0) -> not_found;242     │  ╰── Warning: function partial_find/4 is unused243244245** (Mix) Could not compile dependency :mochiweb, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/mangopi_mq_pro/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile mochiweb --force", update it with "mix deps.update mochiweb" or clean it with "mix deps.clean mochiweb"