forge

Build log

nerves_system_bbb

forge 0.7.2 · fail · run forge-0.7.2-1791185700677
193 of 193 lines
1Resolving Hex dependencies...2Resolution completed in 0.37s3Unchanged:4  aes256 0.5.55  certifi 2.15.06  circular_buffer 1.1.07  cowboy 2.19.08  cowlib 2.20.0 VULNERABLE!9    EEF-CVE-2026-43966 (MEDIUM)10    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c11    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/212    https://osv.dev/vulnerability/EEF-CVE-2026-439661314    EEF-CVE-2026-43969 (LOW)15    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5616    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/117    https://osv.dev/vulnerability/EEF-CVE-2026-4396918  eleveldb 2.2.2019  elixir_make 0.10.020  ex_abci 0.9.021  ex_abci_proto 0.9.022  ex_rlp 0.5.523  exleveldb 0.14.024  forge 0.7.225  google_protos 0.1.026  grpc 0.7.0 VULNERABLE!27    EEF-CVE-2026-48854 (HIGH)28    aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj29    Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc30    https://osv.dev/vulnerability/EEF-CVE-2026-488543132    EEF-CVE-2026-48853 (CRITICAL)33    aka: CVE-2026-48853, GHSA-grp7-v8xh-rj7h34    Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc35    https://osv.dev/vulnerability/EEF-CVE-2026-488533637    EEF-CVE-2026-53430 (HIGH)38    aka: CVE-2026-53430, GHSA-6ccx-9c9f-327w39    grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/140    https://osv.dev/vulnerability/EEF-CVE-2026-5343041  gun 2.6.0 VULNERABLE!42    GHSA-w4f7-4cxr-rv3c (MEDIUM)43    aka: CVE-2026-43966, EEF-CVE-2026-4396644    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability45    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c46  hackney 1.25.0 VULNERABLE!47    EEF-CVE-2026-47071 (HIGH)48    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr49    SOCKS5 TLS upgrade ignores caller timeout in hackney50    https://osv.dev/vulnerability/EEF-CVE-2026-470715152    EEF-CVE-2026-47076 (MEDIUM)53    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq54    SSRF allowlist bypass via percent-encoded host in hackney55    https://osv.dev/vulnerability/EEF-CVE-2026-470765657    EEF-CVE-2026-47069 (LOW)58    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw259    CRLF injection in cookie domain/path options in hackney60    https://osv.dev/vulnerability/EEF-CVE-2026-470696162    EEF-CVE-2026-47075 (MEDIUM)63    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf64    CR/LF injection in query parameter in hackney65    https://osv.dev/vulnerability/EEF-CVE-2026-4707566  hex_prefix 0.1.067  hpax 1.1.068  httpoison 1.8.269  idna 6.1.170  interactive_cmd 0.1.471  jason 1.1.272  keccakf1600_orig 2.0.073  libsecp256k1 0.1.1074  merkle_patricia_tree 0.2.875  metrics 1.0.176  mimerl 1.5.077  mint 1.11.078  mix_erlang_tasks 0.1.079  nerves 2.0.0-pre.280  nerves_discovery 0.1.581  nerves_logging 0.2.482  nerves_runtime 0.13.1383  nerves_system_bbb 2.30.284  nerves_system_br 1.34.485  nerves_system_mangopi_mq_pro 0.17.286  nerves_system_qemu_aarch64 0.4.287  nerves_system_rpi0 2.1.288  nerves_system_rpi4 2.1.289  nerves_system_rpi5 2.1.290  nerves_system_trellis 0.5.091  nerves_system_x86_64 1.34.292  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.193  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.194  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.195  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.196  nerves_toolchain_x86_64_nerves_linux_musl 15.3.197  nerves_uevent 0.1.798  parse_trans 3.4.199  property_table 0.3.4100  protobuf 0.5.4101  ranch 2.3.0102  ring_logger 0.11.7103  ssl_verify_fun 1.1.7104  tablet 0.3.3105  telemetry 1.4.2106  toolshed 0.5.0107  uboot_env 1.0.2108  unicode_util_compat 0.7.1109* Getting forge (Hex package)110* Getting nerves (Hex package)111* Getting ring_logger (Hex package)112* Getting toolshed (Hex package)113* Getting nerves_runtime (Hex package)114* Getting nerves_system_bbb (Hex package)115* Getting nerves_system_mangopi_mq_pro (Hex package)116* Getting nerves_system_qemu_aarch64 (Hex package)117* Getting nerves_system_rpi0 (Hex package)118* Getting nerves_system_rpi4 (Hex package)119* Getting nerves_system_rpi5 (Hex package)120* Getting nerves_system_trellis (Hex package)121* Getting nerves_system_x86_64 (Hex package)122* Getting nerves_system_br (Hex package)123* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)124* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)125* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)126* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)127* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)128* Getting nerves_logging (Hex package)129* Getting nerves_uevent (Hex package)130* Getting uboot_env (Hex package)131* Getting elixir_make (Hex package)132* Getting property_table (Hex package)133* Getting circular_buffer (Hex package)134* Getting interactive_cmd (Hex package)135* Getting nerves_discovery (Hex package)136* Getting tablet (Hex package)137* Getting aes256 (Hex package)138* Getting ex_abci (Hex package)139* Getting httpoison (Hex package)140* Getting jason (Hex package)141* Getting keccakf1600 (Hex package)142* Getting libsecp256k1 (Hex package)143* Getting merkle_patricia_tree (Hex package)144* Getting protobuf (Hex package)145* Getting ex_rlp (Hex package)146* Getting exleveldb (Hex package)147* Getting hex_prefix (Hex package)148* Getting eleveldb (Hex package)149* Getting mix_erlang_tasks (Hex package)150* Getting hackney (Hex package)151* Getting certifi (Hex package)152* Getting idna (Hex package)153* Getting metrics (Hex package)154* Getting mimerl (Hex package)155* Getting parse_trans (Hex package)156* Getting ssl_verify_fun (Hex package)157* Getting unicode_util_compat (Hex package)158* Getting ex_abci_proto (Hex package)159* Getting google_protos (Hex package)160* Getting grpc (Hex package)161* Getting cowboy (Hex package)162* Getting cowlib (Hex package)163* Getting gun (Hex package)164* Getting mint (Hex package)165* Getting telemetry (Hex package)166* Getting hpax (Hex package)167* Getting ranch (Hex package)168Found packages with security advisories, see above for details169You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more170    warning: function docs/0 is unused171    │172 53 │   defp docs do173    │        ~174    │175    └─ /work/proj/deps_bbb/aes256/mix.exs:53:8: Aes256.Mixfile (module)176177    error: undefined variable "description"178    │179  9 │       description: description,180    │                    ^^^^^^^^^^^181    │182    └─ /work/proj/deps_bbb/mix_erlang_tasks/mix.exs:9:20: MixErlangTasks.Mixfile.project/0183184    error: undefined variable "package"185    │186 10 │       package: package,187    │                ^^^^^^^188    │189    └─ /work/proj/deps_bbb/mix_erlang_tasks/mix.exs:10:16: MixErlangTasks.Mixfile.project/0190191Error while loading project :mix_erlang_tasks at /work/proj/deps_bbb/mix_erlang_tasks192** (CompileError) deps_bbb/mix_erlang_tasks/mix.exs: cannot compile module MixErlangTasks.Mixfile (errors have been logged)193