effusion

Build log

nerves_system_mangopi_mq_pro

effusion 0.2.0 · fail · run effusion-0.2.0-1791169669864
243 of 243 lines
1Resolving Hex dependencies...2Resolution completed in 0.865s3Unchanged:4  absinthe 1.5.5 VULNERABLE!5    EEF-CVE-2026-43967 (HIGH)6    aka: CVE-2026-43967, GHSA-9mhv-8h52-q7q27    Quadratic fragment-name uniqueness check causes denial of service in absinthe8    https://osv.dev/vulnerability/EEF-CVE-2026-43967910    EEF-CVE-2026-42793 (HIGH)11    aka: CVE-2026-42793, GHSA-qf4g-9fqq-mmm712    Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe13    https://osv.dev/vulnerability/EEF-CVE-2026-4279314  absinthe_phoenix 1.5.015  absinthe_plug 1.5.8 VULNERABLE!16    EEF-CVE-2026-42794 (LOW)17    aka: CVE-2026-42794, GHSA-c62g-j346-39v518    Reflected XSS via backslash bypass in GraphiQL js_escape in absinthe_plug19    https://osv.dev/vulnerability/EEF-CVE-2026-4279420  certifi 2.15.021  circular_buffer 1.1.022  combine 0.10.023  cors_plug 2.0.324  cowboy 2.19.025  cowboy_telemetry 0.3.126  cowlib 2.20.0 VULNERABLE!27    EEF-CVE-2026-43966 (MEDIUM)28    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c29    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/230    https://osv.dev/vulnerability/EEF-CVE-2026-439663132    EEF-CVE-2026-43969 (LOW)33    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5634    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/135    https://osv.dev/vulnerability/EEF-CVE-2026-4396936  db_connection 2.10.237  decimal 1.9.0 VULNERABLE!38    EEF-CVE-2026-32686 (MEDIUM)39    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v40    Unbounded exponent in decimal enables unauthenticated DoS41    https://osv.dev/vulnerability/EEF-CVE-2026-3268642  ecto 3.10.343  ecto_network 1.2.044  ecto_sql 3.10.245  effusion 0.2.046  elixir_make 0.10.047  ex_bencode 2.0.248  expo 1.1.149  gen_stage 0.14.350  gettext 0.26.251  hackney 1.25.0 VULNERABLE!52    EEF-CVE-2026-47071 (HIGH)53    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr54    SOCKS5 TLS upgrade ignores caller timeout in hackney55    https://osv.dev/vulnerability/EEF-CVE-2026-470715657    EEF-CVE-2026-47076 (MEDIUM)58    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq59    SSRF allowlist bypass via percent-encoded host in hackney60    https://osv.dev/vulnerability/EEF-CVE-2026-470766162    EEF-CVE-2026-47069 (LOW)63    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw264    CRLF injection in cookie domain/path options in hackney65    https://osv.dev/vulnerability/EEF-CVE-2026-470696667    EEF-CVE-2026-47075 (MEDIUM)68    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf69    CR/LF injection in query parameter in hackney70    https://osv.dev/vulnerability/EEF-CVE-2026-4707571  httpoison 1.8.272  httpotion 3.0.3 RETIRED!73    (deprecated) Not really maintained, please check out Tesla74  ibrowse 4.5.075  idna 6.1.176  int_set 1.5.277  interactive_cmd 0.1.478  jason 1.4.579  logger_file_backend 0.0.1480  metatorrent 1.0.081  metrics 1.0.182  mime 2.0.783  mimerl 1.5.084  nerves 2.0.0-pre.285  nerves_discovery 0.1.586  nerves_logging 0.2.487  nerves_runtime 0.13.1388  nerves_system_bbb 2.30.289  nerves_system_br 1.34.490  nerves_system_mangopi_mq_pro 0.17.291  nerves_system_qemu_aarch64 0.4.292  nerves_system_rpi0 2.1.293  nerves_system_rpi4 2.1.294  nerves_system_rpi5 2.1.295  nerves_system_trellis 0.5.096  nerves_system_x86_64 1.34.297  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.198  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.199  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1100  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1101  nerves_toolchain_x86_64_nerves_linux_musl 15.3.1102  nerves_uevent 0.1.7103  nimble_parsec 1.4.2104  parse_trans 3.4.1105  phoenix 1.4.18 VULNERABLE!106    GHSA-p8f7-22gq-m7j9 (HIGH)107    aka: CVE-2022-42975108    Phoenix before 1.6.14 mishandles check_origin wildcarding109    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j9110111    EEF-CVE-2026-56812 (MEDIUM)112    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr113    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff114    https://osv.dev/vulnerability/EEF-CVE-2026-56812115116    EEF-CVE-2026-56811 (HIGH)117    aka: CVE-2026-56811, GHSA-6983-jfq8-485w118    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service119    https://osv.dev/vulnerability/EEF-CVE-2026-56811120  phoenix_pubsub 1.1.2121  plug 1.20.3122  plug_cowboy 2.9.0123  plug_crypto 2.2.0124  postgrex 0.17.5 VULNERABLE!125    EEF-CVE-2026-32687 (HIGH)126    aka: CVE-2026-32687, GHSA-r73h-97w8-m54h127    SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3128    https://osv.dev/vulnerability/EEF-CVE-2026-32687129130    EEF-CVE-2026-58225 (LOW)131    aka: CVE-2026-58225, GHSA-4mw9-4qgj-m97w132    SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service133    https://osv.dev/vulnerability/EEF-CVE-2026-58225134  property_table 0.3.4135  ranch 1.8.1136  ring_logger 0.11.7137  ssl_verify_fun 1.1.7138  tablet 0.3.3139  telemetry 0.4.3140  timex 3.6.4141  toolshed 0.5.0142  tzdata 0.1.201805143  uboot_env 1.0.2144  unicode_util_compat 0.7.1145* Getting effusion (Hex package)146* Getting nerves (Hex package)147* Getting ring_logger (Hex package)148* Getting toolshed (Hex package)149* Getting nerves_runtime (Hex package)150* Getting nerves_system_bbb (Hex package)151* Getting nerves_system_mangopi_mq_pro (Hex package)152* Getting nerves_system_qemu_aarch64 (Hex package)153* Getting nerves_system_rpi0 (Hex package)154* Getting nerves_system_rpi4 (Hex package)155* Getting nerves_system_rpi5 (Hex package)156* Getting nerves_system_trellis (Hex package)157* Getting nerves_system_x86_64 (Hex package)158* Getting nerves_system_br (Hex package)159* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)160* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)161* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)162* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)163* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)164* Getting nerves_logging (Hex package)165* Getting nerves_uevent (Hex package)166* Getting uboot_env (Hex package)167* Getting elixir_make (Hex package)168* Getting property_table (Hex package)169* Getting circular_buffer (Hex package)170* Getting interactive_cmd (Hex package)171* Getting nerves_discovery (Hex package)172* Getting tablet (Hex package)173* Getting absinthe (Hex package)174* Getting absinthe_phoenix (Hex package)175* Getting absinthe_plug (Hex package)176* Getting cors_plug (Hex package)177* Getting ecto_network (Hex package)178* Getting ecto_sql (Hex package)179* Getting ex_bencode (Hex package)180* Getting gen_stage (Hex package)181* Getting gettext (Hex package)182* Getting httpoison (Hex package)183* Getting httpotion (Hex package)184* Getting int_set (Hex package)185* Getting jason (Hex package)186* Getting logger_file_backend (Hex package)187* Getting metatorrent (Hex package)188* Getting phoenix (Hex package)189* Getting phoenix_pubsub (Hex package)190* Getting plug_cowboy (Hex package)191* Getting postgrex (Hex package)192* Getting ranch (Hex package)193* Getting telemetry (Hex package)194* Getting timex (Hex package)195* Getting tzdata (Hex package)196* Getting combine (Hex package)197* Getting db_connection (Hex package)198* Getting decimal (Hex package)199* Getting cowboy (Hex package)200* Getting cowboy_telemetry (Hex package)201* Getting plug (Hex package)202* Getting mime (Hex package)203* Getting plug_crypto (Hex package)204* Getting cowlib (Hex package)205* Getting ibrowse (Hex package)206* Getting hackney (Hex package)207* Getting certifi (Hex package)208* Getting idna (Hex package)209* Getting metrics (Hex package)210* Getting mimerl (Hex package)211* Getting parse_trans (Hex package)212* Getting ssl_verify_fun (Hex package)213* Getting unicode_util_compat (Hex package)214* Getting expo (Hex package)215* Getting ecto (Hex package)216* Getting nimble_parsec (Hex package)217Found retired packages, see above for details218Found packages with security advisories, see above for details219You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more220    error: undefined variable "package"221    │222  9 │      package: package,223    │               ^^^^^^^224    │225    └─ /work/proj/deps_mangopi_mq_pro/tzdata/mix.exs:9:15: Tzdata.Mixfile.project/0226227    error: undefined variable "description"228    │229 10 │      description: description,230    │                   ^^^^^^^^^^^231    │232    └─ /work/proj/deps_mangopi_mq_pro/tzdata/mix.exs:10:19: Tzdata.Mixfile.project/0233234    error: undefined variable "deps"235    │236 11 │      deps: deps]237    │            ^^^^238    │239    └─ /work/proj/deps_mangopi_mq_pro/tzdata/mix.exs:11:12: Tzdata.Mixfile.project/0240241Error while loading project :tzdata at /work/proj/deps_mangopi_mq_pro/tzdata242** (CompileError) deps_mangopi_mq_pro/tzdata/mix.exs: cannot compile module Tzdata.Mixfile (errors have been logged)243