Build log
nerves_system_x86_64
drab_pagination 0.1.0 · fail · run drab_pagination-0.1.0-1791168057420
217 of 217 lines
1Resolving Hex dependencies...2Resolution completed in 0.584s3Unchanged:4 circular_buffer 1.1.05 cowboy 1.1.2 VULNERABLE!6 GHSA-w4f7-4cxr-rv3c (MEDIUM)7 aka: CVE-2026-43966, EEF-CVE-2026-439668 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability9 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c10 cowlib 1.0.2 VULNERABLE!11 EEF-CVE-2026-7790 (HIGH)12 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6513 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS14 https://osv.dev/vulnerability/EEF-CVE-2026-77901516 EEF-CVE-2026-43970 (HIGH)17 aka: CVE-2026-43970, GHSA-84f2-rp86-235p18 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame19 https://osv.dev/vulnerability/EEF-CVE-2026-4397020 decimal 1.9.0 VULNERABLE!21 EEF-CVE-2026-32686 (MEDIUM)22 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v23 Unbounded exponent in decimal enables unauthenticated DoS24 https://osv.dev/vulnerability/EEF-CVE-2026-3268625 deppie 1.1.226 drab 0.6.327 drab_pagination 0.1.028 ecto 2.2.1229 elixir_make 0.10.030 expo 1.1.131 floki 0.18.132 gettext 0.26.233 global_flags 1.0.034 interactive_cmd 0.1.435 mime 2.0.736 mochiweb 2.22.037 nerves 2.0.0-pre.238 nerves_discovery 0.1.539 nerves_logging 0.2.440 nerves_runtime 0.13.1341 nerves_system_bbb 2.30.242 nerves_system_br 1.34.443 nerves_system_mangopi_mq_pro 0.17.244 nerves_system_qemu_aarch64 0.4.245 nerves_system_rpi0 2.1.246 nerves_system_rpi4 2.1.247 nerves_system_rpi5 2.1.248 nerves_system_trellis 0.5.049 nerves_system_x86_64 1.34.250 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.151 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.152 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.153 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.154 nerves_toolchain_x86_64_nerves_linux_musl 15.3.155 nerves_uevent 0.1.756 phoenix 1.4.6 VULNERABLE!57 EEF-CVE-2026-56812 (MEDIUM)58 aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr59 Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff60 https://osv.dev/vulnerability/EEF-CVE-2026-568126162 EEF-CVE-2026-56811 (HIGH)63 aka: CVE-2026-56811, GHSA-6983-jfq8-485w64 Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service65 https://osv.dev/vulnerability/EEF-CVE-2026-568116667 GHSA-p8f7-22gq-m7j9 (HIGH)68 aka: CVE-2022-4297569 Phoenix before 1.6.14 mishandles check_origin wildcarding70 https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j971 phoenix_html 2.14.3 VULNERABLE!72 GHSA-5g2h-9x5v-5h3x (MEDIUM)73 aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q274 phoenix_html allows Cross-site Scripting in HEEx class attributes75 https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x76 phoenix_pubsub 1.1.277 plug 1.20.378 plug_crypto 2.2.079 poolboy 1.5.280 property_table 0.3.481 ranch 1.3.282 ring_logger 0.11.783 tablet 0.3.384 telemetry 1.4.285 toolshed 0.5.086 uboot_env 1.0.287* Getting drab_pagination (Hex package)88* Getting nerves (Hex package)89* Getting ring_logger (Hex package)90* Getting toolshed (Hex package)91* Getting nerves_runtime (Hex package)92* Getting nerves_system_bbb (Hex package)93* Getting nerves_system_mangopi_mq_pro (Hex package)94* Getting nerves_system_qemu_aarch64 (Hex package)95* Getting nerves_system_rpi0 (Hex package)96* Getting nerves_system_rpi4 (Hex package)97* Getting nerves_system_rpi5 (Hex package)98* Getting nerves_system_trellis (Hex package)99* Getting nerves_system_x86_64 (Hex package)100* Getting nerves_system_br (Hex package)101* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)102* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)103* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)104* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)105* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)106* Getting nerves_logging (Hex package)107* Getting nerves_uevent (Hex package)108* Getting uboot_env (Hex package)109* Getting elixir_make (Hex package)110* Getting property_table (Hex package)111* Getting circular_buffer (Hex package)112* Getting interactive_cmd (Hex package)113* Getting nerves_discovery (Hex package)114* Getting tablet (Hex package)115* Getting drab (Hex package)116* Getting ecto (Hex package)117* Getting decimal (Hex package)118* Getting poolboy (Hex package)119* Getting cowboy (Hex package)120* Getting deppie (Hex package)121* Getting floki (Hex package)122* Getting gettext (Hex package)123* Getting phoenix (Hex package)124* Getting phoenix_html (Hex package)125* Getting phoenix_pubsub (Hex package)126* Getting plug (Hex package)127* Getting mime (Hex package)128* Getting plug_crypto (Hex package)129* Getting telemetry (Hex package)130* Getting expo (Hex package)131* Getting mochiweb (Hex package)132* Getting global_flags (Hex package)133* Getting cowlib (Hex package)134* Getting ranch (Hex package)135Found packages with security advisories, see above for details136===> Analyzing applications...137===> Compiling mochiweb138 ┌─ src/mochiweb_socket_server.erl:139 │140 199 │ case (catch inet:getaddr("localhost", inet6)) of141 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.142Compile directive 'nowarn_deprecated_catch' can be used to suppress143warnings in selected modules.144145 ┌─ src/mochiweb_socket_server.erl:146 │147 322 │ catch F([{timing, Timing} | state_to_proplist(State1)])148 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.149Compile directive 'nowarn_deprecated_catch' can be used to suppress150warnings in selected modules.151152153 ┌─ src/reloader.erl:154 │155 154 │ case catch Module:test() of156 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.157Compile directive 'nowarn_deprecated_catch' can be used to suppress158warnings in selected modules.159160161 ┌─ src/mochinum.erl:162 │163 47 │ digits(0.0) ->164 │ ╰── Warning: matching on the float 0.0 will no longer also match -0.0 in OTP 27.165If you specifically intend to match 0.0 alone, write +0.0 instead.166167168===> Compiling src/mochiweb_multipart.erl failed169 ┌─ src/mochiweb_multipart.erl:170 │171 278 │ {maybe, Start} ->172 │ ╰── syntax error before: ','173174 ┌─ src/mochiweb_multipart.erl:175 │176 331 │ {maybe, Skip};177 │ ╰── syntax error before: ','178179180 ┌─ src/mochiweb_multipart.erl:181 │182 186 │ feed_mp(headers,183 │ ╰── function feed_mp/2 undefined184185186 ┌─ src/mochiweb_multipart.erl:187 │188 191 │ parse_headers(<<>>) -> [];189 │ ╰── Warning: function parse_headers/1 is unused190191 ┌─ src/mochiweb_multipart.erl:192 │193 194 │ parse_headers(Binary, Acc) ->194 │ ╰── Warning: function parse_headers/2 is unused195196 ┌─ src/mochiweb_multipart.erl:197 │198 202 │ split_header(Line) ->199 │ ╰── Warning: function split_header/1 is unused200201 ┌─ src/mochiweb_multipart.erl:202 │203 217 │ read_more(State = #mp{length = Length, buffer = Buffer,204 │ ╰── Warning: function read_more/1 is unused205206 ┌─ src/mochiweb_multipart.erl:207 │208 300 │ find_in_binary(P, Data) when size(P) > 0 ->209 │ ╰── Warning: function find_in_binary/2 is unused210211 ┌─ src/mochiweb_multipart.erl:212 │213 312 │ partial_find(_B, _D, _N, 0) -> not_found;214 │ ╰── Warning: function partial_find/4 is unused215216217** (Mix) Could not compile dependency :mochiweb, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/x86_64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile mochiweb --force", update it with "mix deps.update mochiweb" or clean it with "mix deps.clean mochiweb"