host

1Resolving Hex dependencies...2Resolution completed in 0.205s3Unchanged:4  circular_buffer 1.1.05  cowboy 2.19.06  cowlib 2.20.0 VULNERABLE!7    EEF-CVE-2026-43966 (MEDIUM)8    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c9    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/210    https://osv.dev/vulnerability/EEF-CVE-2026-439661112    EEF-CVE-2026-43969 (LOW)13    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5614    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/115    https://osv.dev/vulnerability/EEF-CVE-2026-4396916  decorator 1.4.017  elixir_make 0.10.018  erlexec 1.21.0 RETIRED!19    (deprecated) Deprecated20  ex_debug_toolbar 0.5.021  expo 1.1.122  gettext 0.26.223  interactive_cmd 0.1.424  mime 2.0.725  nerves 2.0.0-pre.226  nerves_discovery 0.1.527  nerves_logging 0.2.428  nerves_runtime 0.13.1329  nerves_system_bbb 2.30.230  nerves_system_br 1.34.431  nerves_system_mangopi_mq_pro 0.17.232  nerves_system_qemu_aarch64 0.4.233  nerves_system_rpi0 2.1.234  nerves_system_rpi4 2.1.235  nerves_system_rpi5 2.1.236  nerves_system_trellis 0.5.037  nerves_system_x86_64 1.34.238  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.139  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.140  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.141  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.142  nerves_toolchain_x86_64_nerves_linux_musl 15.3.143  nerves_uevent 0.1.744  phoenix 1.4.6 VULNERABLE!45    EEF-CVE-2026-56812 (MEDIUM)46    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr47    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff48    https://osv.dev/vulnerability/EEF-CVE-2026-568124950    EEF-CVE-2026-56811 (HIGH)51    aka: CVE-2026-56811, GHSA-6983-jfq8-485w52    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service53    https://osv.dev/vulnerability/EEF-CVE-2026-568115455    GHSA-p8f7-22gq-m7j9 (HIGH)56    aka: CVE-2022-4297557    Phoenix before 1.6.14 mishandles check_origin wildcarding58    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j959  phoenix_html 2.14.3 VULNERABLE!60    GHSA-5g2h-9x5v-5h3x (MEDIUM)61    aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q262    phoenix_html allows Cross-site Scripting in HEEx class attributes63    https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x64  phoenix_pubsub 1.1.265  plug 1.20.366  plug_crypto 2.2.067  property_table 0.3.468  ranch 2.3.069  ring_logger 0.11.770  tablet 0.3.371  telemetry 1.4.272  temp 0.4.973  toolshed 0.5.074  uboot_env 1.0.275Found retired packages, see above for details76Found packages with security advisories, see above for details77All dependencies have been fetched78==> temp79Compiling 3 files (.ex)80Generated temp app81==> nerves_compatibility_test82===> Fetching pc v1.15.083===> Analyzing applications...84===> Compiling pc85===> Compiling c_src/ei++.cpp86===> Compiling c_src/exec.cpp87===> Compiling c_src/exec_impl.cpp88===> Linking /work/proj/_build/host/lib/erlexec/priv/x86_64-pc-linux-gnu/exec-port89===> Analyzing applications...90===> Compiling erlexec91warning: "xref: [exclude: ...]" in your mix.exs file is deprecated, instead use: "elixirc_options: [no_warn_undefined: ...]"92  (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:243: Mix.Tasks.Compile.Elixir.xref_exclude_opts/293  (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:142: Mix.Tasks.Compile.Elixir.run/194  (mix 1.20.3) lib/mix/task.ex:502: anonymous fn/3 in Mix.Task.run_task/595  (mix 1.20.3) lib/mix/task.compiler.ex:299: Mix.Task.Compiler.run_compiler/296  (mix 1.20.3) lib/mix/task.compiler.ex:287: Mix.Task.Compiler.run/497  (mix 1.20.3) lib/mix/tasks/compile.all.ex:75: Mix.Tasks.Compile.All.do_run/29899==> phoenix100Compiling 67 files (.ex)101     warning: the variable "prefix" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator102     │103 190 │       <<attr::size(prefix)-binary, ":unique">> -> attr104     │                    ~105     │106     └─ lib/mix/phoenix/schema.ex:190:20: Mix.Phoenix.Schema.drop_unique/1107108     warning: using single-quoted strings to represent charlists is deprecated.109     Use ~c"" if you indeed want a charlist or use "" instead.110     You may run "mix format --migrate" to change all single-quoted111     strings to use the ~c sigil and fix this warning.112     │113 258 │           notBefore: {:utcTime, '#{not_before}000000Z'},114     │                                 ~115     │116     └─ lib/mix/tasks/phx.gen.cert.ex:258:33117118     warning: using single-quoted strings to represent charlists is deprecated.119     Use ~c"" if you indeed want a charlist or use "" instead.120     You may run "mix format --migrate" to change all single-quoted121     strings to use the ~c sigil and fix this warning.122     │123 259 │           notAfter: {:utcTime, '#{not_after}000000Z'}124     │                                ~125     │126     └─ lib/mix/tasks/phx.gen.cert.ex:259:32127128129== Compilation error in file lib/mix/tasks/phx.gen.cert.ex ==130** (ArgumentError) lib file public_key/include/OTP-PUB-KEY.hrl could not be found131    (elixir 1.20.3) lib/record/extractor.ex:45: Record.Extractor.from_lib_file/1132    (elixir 1.20.3) lib/record/extractor.ex:22: Record.Extractor.from_or_from_lib_file/1133    (elixir 1.20.3) lib/record/extractor.ex:9: Record.Extractor.extract/2134    lib/mix/tasks/phx.gen.cert.ex:146: (module)135could not compile dependency :phoenix, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile phoenix --force", update it with "mix deps.update phoenix" or clean it with "mix deps.clean phoenix"