nerves_system_x86_64

1Resolving Hex dependencies...2Resolution completed in 0.2s3Unchanged:4  circular_buffer 1.1.05  connection 1.0.46  cowboy 2.6.3 VULNERABLE!7    EEF-CVE-2026-8466 (HIGH)8    aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x89    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy10    https://osv.dev/vulnerability/EEF-CVE-2026-84661112    EEF-CVE-2026-65624 (MEDIUM)13    aka: CVE-2026-6562414    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion15    https://osv.dev/vulnerability/EEF-CVE-2026-656241617    GHSA-w4f7-4cxr-rv3c (MEDIUM)18    aka: CVE-2026-43966, EEF-CVE-2026-4396619    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability20    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c21  cowlib 2.7.3 VULNERABLE!22    EEF-CVE-2026-59248 (HIGH)23    aka: CVE-2026-5924824    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS25    https://osv.dev/vulnerability/EEF-CVE-2026-592482627    EEF-CVE-2026-43970 (HIGH)28    aka: CVE-2026-43970, GHSA-84f2-rp86-235p29    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame30    https://osv.dev/vulnerability/EEF-CVE-2026-439703132    EEF-CVE-2026-43968 (MEDIUM)33    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r34    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/135    https://osv.dev/vulnerability/EEF-CVE-2026-439683637    EEF-CVE-2026-7790 (HIGH)38    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6539    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS40    https://osv.dev/vulnerability/EEF-CVE-2026-779041  db_connection 1.1.342  elixir_make 0.10.043  elixir_uuid 1.2.144  ex_dgraph 0.2.0-beta.345  grpc 0.3.1 VULNERABLE!46    EEF-CVE-2026-48854 (HIGH)47    aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj48    Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc49    https://osv.dev/vulnerability/EEF-CVE-2026-4885450  gun 1.3.3 VULNERABLE!51    EEF-CVE-2026-43973 (HIGH)52    aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7753    gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion54    https://osv.dev/vulnerability/EEF-CVE-2026-439735556    GHSA-w4f7-4cxr-rv3c (MEDIUM)57    aka: CVE-2026-43966, EEF-CVE-2026-4396658    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability59    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c60  interactive_cmd 0.1.461  morphix 0.6.062  nerves 2.0.0-pre.263  nerves_discovery 0.1.564  nerves_logging 0.2.465  nerves_runtime 0.13.1366  nerves_system_bbb 2.30.267  nerves_system_br 1.34.468  nerves_system_mangopi_mq_pro 0.17.269  nerves_system_qemu_aarch64 0.4.270  nerves_system_rpi0 2.1.271  nerves_system_rpi4 2.1.272  nerves_system_rpi5 2.1.273  nerves_system_trellis 0.5.074  nerves_system_x86_64 1.34.275  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.176  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.177  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.178  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.179  nerves_toolchain_x86_64_nerves_linux_musl 15.3.180  nerves_uevent 0.1.781  poison 3.1.082  poolboy 1.5.283  property_table 0.3.484  protobuf 0.6.385  ranch 1.7.186  retry 0.11.287  ring_logger 0.11.788  tablet 0.3.389  toolshed 0.5.090  uboot_env 1.0.291* Getting ex_dgraph (Hex package)92* Getting nerves (Hex package)93* Getting ring_logger (Hex package)94* Getting toolshed (Hex package)95* Getting nerves_runtime (Hex package)96* Getting nerves_system_bbb (Hex package)97* Getting nerves_system_mangopi_mq_pro (Hex package)98* Getting nerves_system_qemu_aarch64 (Hex package)99* Getting nerves_system_rpi0 (Hex package)100* Getting nerves_system_rpi4 (Hex package)101* Getting nerves_system_rpi5 (Hex package)102* Getting nerves_system_trellis (Hex package)103* Getting nerves_system_x86_64 (Hex package)104* Getting nerves_system_br (Hex package)105* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)106* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)107* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)108* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)109* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)110* Getting nerves_logging (Hex package)111* Getting nerves_uevent (Hex package)112* Getting uboot_env (Hex package)113* Getting elixir_make (Hex package)114* Getting property_table (Hex package)115* Getting circular_buffer (Hex package)116* Getting interactive_cmd (Hex package)117* Getting nerves_discovery (Hex package)118* Getting tablet (Hex package)119* Getting db_connection (Hex package)120* Getting elixir_uuid (Hex package)121* Getting grpc (Hex package)122* Getting morphix (Hex package)123* Getting poison (Hex package)124* Getting poolboy (Hex package)125* Getting protobuf (Hex package)126* Getting retry (Hex package)127* Getting cowboy (Hex package)128* Getting gun (Hex package)129* Getting cowlib (Hex package)130* Getting ranch (Hex package)131* Getting connection (Hex package)132Found packages with security advisories, see above for details133    warning: String.strip/1 is deprecated. Use String.trim/1 instead134    │135  4 │   @version File.read!("VERSION") |> String.strip136    │                                            ~137    │138    └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)139140===> Analyzing applications...141===> Compiling ranch142     ┌─ src/ranch_ssl.erl:143     │144 142 │  	case ssl:ssl_accept(CSocket, Opts, Timeout) of145     │  	     ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead146147148    ┌─ src/ranch_conns_sup.erl:149    │150 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},151    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.152Compile directive 'nowarn_deprecated_catch' can be used to suppress153warnings in selected modules.154155156==> protobuf157Compiling 20 files (.ex)158     warning: this clause cannot match because a previous clause at line 253 matches the same pattern as this clause159     │160 254 │   defp cal_repeated(_props, %{repeated: true, oneof: true}), do:161     │        ~162     │163     └─ lib/protobuf/dsl.ex:254:8164165     warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead166     │167 119 │           val = decode_type_m(type, key, val)168     │           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~169     │170     └─ lib/protobuf/decoder.ex:119: Protobuf.Decoder.build_struct/3171172warning: pattern matching on 0.0 is equivalent to matching only on +0.0. Instead you must match on +0.0 or -0.0173└─ lib/protobuf/encoder.ex: Protobuf.Encoder.skip_field?/3174175     warning: the variable "len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator176     │177 270 │     <<bytes::bytes-size(len), rest::bits>> = bin178     │                         ~179     │180     └─ lib/protobuf/decoder.ex:270:25: Protobuf.Decoder.raw_handle_varint/4181182     warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead183     │184 303 │       decode_type_m(type, key, v)185     │       ~~~~~~~~~~~~~~~~~~~~~~~~~~~186     │187     └─ lib/protobuf/decoder.ex:303: Protobuf.Decoder.put_packed_field/3188189    warning: System.stacktrace/0 is deprecated. Use __STACKTRACE__ instead190    │191 65 │       stacktrace = System.stacktrace()192    │                           ~193    │194    └─ lib/protobuf/encoder.ex:65:27: Protobuf.Encoder.encode_fields/5195196     warning: the following clause is redundant:197198         defp cal_repeated(_props, %{repeated: true, oneof: true})199200     it has type:201202         dynamic(), %{..., oneof: true, repeated: true}203204     previous clauses have already matched on the following types:205206         %{..., map?: true}, term()207         term(), %{..., repeated: true}208209     │210 254 │   defp cal_repeated(_props, %{repeated: true, oneof: true}), do:211     │        ~212     │213     └─ lib/protobuf/dsl.ex:254:8: Protobuf.DSL.cal_repeated/2214215    warning: incompatible types given to Protobuf.Decoder.decode/2:216217        Protobuf.Decoder.decode(data, mod)218219    given types:220221        -dynamic(%{..., __struct__: atom()})-, dynamic(atom())222223    but expected one of:224225        bitstring(), atom()226227    where "data" was given the type:228229        # type: dynamic(%{..., __struct__: atom()})230        # from: lib/protobuf.ex:29:21231        %mod{} = data232233    where "mod" was given the type:234235        # type: dynamic(atom())236        # from: lib/protobuf.ex:29:21237        %mod{} = data238239    type warning found at:240    │241 30 │     Protobuf.Decoder.decode(data, mod)242    │                      ~243    │244    └─ lib/protobuf.ex:30:22: Protobuf.decode/1245246Generated protobuf app247==> nerves_compatibility_test248===> Analyzing applications...249===> Compiling cowlib250===> Compiling src/cow_sse.erl failed251    ┌─ src/cow_sse.erl:252    │253 56 │  	-> {event, parsed_event(), State} | {more, State}.254    │  	                           ╰── type variable 'State' is only used once (is unbound)255256257** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/x86_64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"