nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.229s3Unchanged:4  circular_buffer 1.1.05  csv 1.4.46  decimal 1.9.0 VULNERABLE!7    EEF-CVE-2026-32686 (MEDIUM)8    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v9    Unbounded exponent in decimal enables unauthenticated DoS10    https://osv.dev/vulnerability/EEF-CVE-2026-3268611  ecto 2.2.1212  elixir_make 0.10.013  ex_csv_editor 0.2.114  interactive_cmd 0.1.415  mime 1.6.016  nerves 2.0.0-pre.217  nerves_discovery 0.1.518  nerves_logging 0.2.419  nerves_runtime 0.13.1320  nerves_system_bbb 2.30.221  nerves_system_br 1.34.422  nerves_system_mangopi_mq_pro 0.17.223  nerves_system_qemu_aarch64 0.4.224  nerves_system_rpi0 2.1.225  nerves_system_rpi4 2.1.226  nerves_system_rpi5 2.1.227  nerves_system_trellis 0.5.028  nerves_system_x86_64 1.34.229  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.130  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.131  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.132  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.133  nerves_toolchain_x86_64_nerves_linux_musl 15.3.134  nerves_uevent 0.1.735  parallel_stream 1.0.636  phoenix 1.2.5 VULNERABLE!37    GHSA-p8f7-22gq-m7j9 (HIGH)38    aka: CVE-2022-4297539    Phoenix before 1.6.14 mishandles check_origin wildcarding40    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j94142    EEF-CVE-2026-56812 (MEDIUM)43    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr44    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff45    https://osv.dev/vulnerability/EEF-CVE-2026-568124647    EEF-CVE-2026-56811 (HIGH)48    aka: CVE-2026-56811, GHSA-6983-jfq8-485w49    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service50    https://osv.dev/vulnerability/EEF-CVE-2026-5681151  phoenix_html 2.10.5 VULNERABLE!52    GHSA-5g2h-9x5v-5h3x (MEDIUM)53    aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q254    phoenix_html allows Cross-site Scripting in HEEx class attributes55    https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x56  phoenix_pubsub 1.1.257  plug 1.3.6 VULNERABLE!58    EEF-CVE-2026-56813 (LOW)59    aka: CVE-2026-56813, GHSA-wpmj-jh88-rpgm60    Cookie attribute injection in Plug.Conn.Cookies.encode/261    https://osv.dev/vulnerability/EEF-CVE-2026-5681362  poison 2.2.063  poolboy 1.5.264  property_table 0.3.465  ring_logger 0.11.766  scrivener 2.7.267  scrivener_ecto 1.3.068  scrivener_html 1.8.169  scrivener_list 1.0.170  tablet 0.3.371  toolshed 0.5.072  uboot_env 1.0.273* Getting ex_csv_editor (Hex package)74* Getting nerves (Hex package)75* Getting ring_logger (Hex package)76* Getting toolshed (Hex package)77* Getting nerves_runtime (Hex package)78* Getting nerves_system_bbb (Hex package)79* Getting nerves_system_mangopi_mq_pro (Hex package)80* Getting nerves_system_qemu_aarch64 (Hex package)81* Getting nerves_system_rpi0 (Hex package)82* Getting nerves_system_rpi4 (Hex package)83* Getting nerves_system_rpi5 (Hex package)84* Getting nerves_system_trellis (Hex package)85* Getting nerves_system_x86_64 (Hex package)86* Getting nerves_system_br (Hex package)87* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)88* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)89* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)90* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)91* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)92* Getting nerves_logging (Hex package)93* Getting nerves_uevent (Hex package)94* Getting uboot_env (Hex package)95* Getting elixir_make (Hex package)96* Getting property_table (Hex package)97* Getting circular_buffer (Hex package)98* Getting interactive_cmd (Hex package)99* Getting nerves_discovery (Hex package)100* Getting tablet (Hex package)101* Getting csv (Hex package)102* Getting phoenix (Hex package)103* Getting phoenix_html (Hex package)104* Getting scrivener_html (Hex package)105* Getting scrivener_list (Hex package)106* Getting scrivener_ecto (Hex package)107* Getting ecto (Hex package)108* Getting scrivener (Hex package)109* Getting decimal (Hex package)110* Getting poolboy (Hex package)111* Getting plug (Hex package)112* Getting mime (Hex package)113* Getting phoenix_pubsub (Hex package)114* Getting poison (Hex package)115* Getting parallel_stream (Hex package)116Found packages with security advisories, see above for details117    warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes118    │119 17 │         preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test]120    │                             ~121    │122    └─ /work/proj/deps_trellis/csv/mix.exs:17:29123124    error: undefined variable "deps"125    │126  9 │         deps: deps,127    │               ^^^^128    │129    └─ /work/proj/deps_trellis/csv/mix.exs:9:15: CSV.Mixfile.project/0130131    error: undefined variable "package"132    │133 10 │         package: package,134    │                  ^^^^^^^135    │136    └─ /work/proj/deps_trellis/csv/mix.exs:10:18: CSV.Mixfile.project/0137138Error while loading project :csv at /work/proj/deps_trellis/csv139** (CompileError) deps_trellis/csv/mix.exs: cannot compile module CSV.Mixfile (errors have been logged)140