host

1Resolving Hex dependencies...2Resolution completed in 0.296s3Unchanged:4  bandit 1.6.11 VULNERABLE!5    EEF-CVE-2026-39803 (HIGH)6    aka: CVE-2026-39803, GHSA-9q9q-324x-93r27    HTTP/1 chunked body reader ignores length cap in bandit8    https://osv.dev/vulnerability/EEF-CVE-2026-39803910    EEF-CVE-2026-39804 (HIGH)11    aka: CVE-2026-39804, GHSA-frh3-6pv6-rc8j12    WebSocket permessage-deflate inflate has no output-size cap in bandit13    https://osv.dev/vulnerability/EEF-CVE-2026-398041415    EEF-CVE-2026-39807 (MEDIUM)16    aka: CVE-2026-39807, GHSA-375f-4r2h-f99j17    Client-supplied URI scheme trusted without transport verification in bandit18    https://osv.dev/vulnerability/EEF-CVE-2026-398071920    EEF-CVE-2026-39805 (MEDIUM)21    aka: CVE-2026-39805, GHSA-c67r-gc9j-2qf722    CL.CL HTTP request smuggling via duplicate Content-Length in bandit23    https://osv.dev/vulnerability/EEF-CVE-2026-398052425    EEF-CVE-2026-42788 (MEDIUM)26    aka: CVE-2026-42788, GHSA-q6v9-r226-v65f27    HTTP/2 frame size limit checked after body is buffered in bandit28    https://osv.dev/vulnerability/EEF-CVE-2026-427882930    EEF-CVE-2026-39806 (HIGH)31    aka: CVE-2026-39806, GHSA-rf5q-vwxw-gmrf32    HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit33    https://osv.dev/vulnerability/EEF-CVE-2026-398063435    EEF-CVE-2026-42786 (HIGH)36    aka: CVE-2026-42786, GHSA-pf94-94m9-536p37    WebSocket fragmented message reassembly unbounded in bandit38    https://osv.dev/vulnerability/EEF-CVE-2026-427863940    EEF-CVE-2026-74836 (HIGH)41    aka: CVE-2026-74836, GHSA-xj8g-532w-jv9442    HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit43    https://osv.dev/vulnerability/EEF-CVE-2026-748364445    EEF-CVE-2026-75484 (MEDIUM)46    aka: CVE-2026-75484, GHSA-x3gh-xhj4-3vq847    HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit48    https://osv.dev/vulnerability/EEF-CVE-2026-7548449  bpe 8.12.450  circular_buffer 1.1.051  elixir_make 0.10.052  exosculat 4.5.653  form 11.4.1554  hpax 1.1.055  interactive_cmd 0.1.456  kvs 10.8.357  mime 2.0.758  n2o 10.12.459  nerves 2.0.0-pre.260  nerves_discovery 0.1.561  nerves_logging 0.2.462  nerves_runtime 0.13.1363  nerves_system_bbb 2.30.264  nerves_system_br 1.34.465  nerves_system_mangopi_mq_pro 0.17.266  nerves_system_qemu_aarch64 0.4.267  nerves_system_rpi0 2.1.268  nerves_system_rpi4 2.1.269  nerves_system_rpi5 2.1.270  nerves_system_trellis 0.5.071  nerves_system_x86_64 1.34.272  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.173  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.174  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.175  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.176  nerves_toolchain_x86_64_nerves_linux_musl 15.3.177  nerves_uevent 0.1.778  nitro 11.4.1679  plug 1.15.6 VULNERABLE!80    EEF-CVE-2026-56814 (MEDIUM)81    aka: CVE-2026-56814, GHSA-95qv-c9g9-rm6382    Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)83    https://osv.dev/vulnerability/EEF-CVE-2026-568148485    EEF-CVE-2026-56813 (LOW)86    aka: CVE-2026-56813, GHSA-wpmj-jh88-rpgm87    Cookie attribute injection in Plug.Conn.Cookies.encode/288    https://osv.dev/vulnerability/EEF-CVE-2026-5681389  plug_crypto 2.2.090  property_table 0.3.491  ring_logger 0.11.792  rocksdb 2.6.293  syn 2.1.094  tablet 0.3.395  telemetry 1.4.296  thousand_island 1.5.097  toolshed 0.5.098  uboot_env 1.0.299  websock 0.5.3100  websock_adapter 0.6.0101Found packages with security advisories, see above for details102All dependencies have been fetched103==> kvs104Compiling 6 files (.erl)105src/stores/kvs_fs.erl:70:10: Warning: function kvs_fs:get/2 is not exported106%   70|     case kvs_fs:get(TableName, Key) of107%     |          ^108109src/stores/kvs_rocks.erl:113:3: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.110Compile directive 'nowarn_deprecated_catch' can be used to suppress111warnings in selected modules.112%  113|   catch case lists:foldl(State_Machine, Initial_Object, Compiled_Operations) of113%     |   ^114115Compiling 1 file (.ex)116warning: cannot infer signatures from :ex_doc because it is not loaded117118Generated kvs app119==> nerves_compatibility_test120===> Analyzing applications...121===> Compiling syn122    ┌─ src/syn_backbone.erl:123    │124 60 │      catch CustomEventHandler:module_info(exports),125    │      ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.126Compile directive 'nowarn_deprecated_catch' can be used to suppress127warnings in selected modules.128129130     ┌─ src/syn_registry.erl:131     │132 355 │      catch erlang:demonitor(MonitorRef, [flush]),133     │      ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.134Compile directive 'nowarn_deprecated_catch' can be used to suppress135warnings in selected modules.136137     ┌─ src/syn_registry.erl:138     │139 821 │              catch erlang:demonitor(MonitorRef, [flush]),140     │              ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.141Compile directive 'nowarn_deprecated_catch' can be used to suppress142warnings in selected modules.143144145==> n2o146Compiling 18 files (.erl)147src/protos/n2o_ftp.erl:60:5: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.148Compile directive 'nowarn_deprecated_catch' can be used to suppress149warnings in selected modules.150%   60|     catch n2o:send(Sid, {direct, FTP}),151%     |     ^152153src/protos/n2o_ftp.erl:89:21: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.154Compile directive 'nowarn_deprecated_catch' can be used to suppress155warnings in selected modules.156%   89|                     catch n2o:send(Sid, {direct, FTP3}) end),157%     |                     ^158159src/n2o_proto.erl:80:5: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.160Compile directive 'nowarn_deprecated_catch' can be used to suppress161warnings in selected modules.162%   80|     catch Module:event(terminate).163%     |     ^164165Compiling 3 files (.ex)166Generated n2o app167==> nitro168Compiling 108 files (.erl)169src/nitro_pi.erl:91:5: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.170Compile directive 'nowarn_deprecated_catch' can be used to suppress171warnings in selected modules.172%   91|     catch cache(Tab,{Tab,Name},undefined), ok.173%     |     ^174175Compiling 4 files (.ex)176    warning: unused require Record177    │178  3 │   require Record179    │   ~180    │181    └─ lib/combo.ex:3:3182183Generated nitro app184==> form185Compiling 5 files (.erl)186Compiling 2 files (.ex)187    warning: unused require NITRO188    │189  4 │   require NITRO190    │   ~191    │192    └─ lib/api.ex:4:3193194Generated form app195==> nerves_compatibility_test196fatal: not a git repository (or any parent up to mount point /)197Stopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set).198===> Hook for compile failed!199200** (Mix) Could not compile dependency :rocksdb, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/host/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile rocksdb --force", update it with "mix deps.update rocksdb" or clean it with "mix deps.clean rocksdb"