Build log
nerves_system_rpi4
forge 0.7.2 · fail · run forge-0.7.2-1791185700677
193 of 193 lines
1Resolving Hex dependencies...2Resolution completed in 0.364s3Unchanged:4 aes256 0.5.55 certifi 2.15.06 circular_buffer 1.1.07 cowboy 2.19.08 cowlib 2.20.0 VULNERABLE!9 EEF-CVE-2026-43966 (MEDIUM)10 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c11 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/212 https://osv.dev/vulnerability/EEF-CVE-2026-439661314 EEF-CVE-2026-43969 (LOW)15 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5616 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/117 https://osv.dev/vulnerability/EEF-CVE-2026-4396918 eleveldb 2.2.2019 elixir_make 0.10.020 ex_abci 0.9.021 ex_abci_proto 0.9.022 ex_rlp 0.5.523 exleveldb 0.14.024 forge 0.7.225 google_protos 0.1.026 grpc 0.7.0 VULNERABLE!27 EEF-CVE-2026-48854 (HIGH)28 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj29 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc30 https://osv.dev/vulnerability/EEF-CVE-2026-488543132 EEF-CVE-2026-48853 (CRITICAL)33 aka: CVE-2026-48853, GHSA-grp7-v8xh-rj7h34 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc35 https://osv.dev/vulnerability/EEF-CVE-2026-488533637 EEF-CVE-2026-53430 (HIGH)38 aka: CVE-2026-53430, GHSA-6ccx-9c9f-327w39 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/140 https://osv.dev/vulnerability/EEF-CVE-2026-5343041 gun 2.6.0 VULNERABLE!42 GHSA-w4f7-4cxr-rv3c (MEDIUM)43 aka: CVE-2026-43966, EEF-CVE-2026-4396644 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability45 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c46 hackney 1.25.0 VULNERABLE!47 EEF-CVE-2026-47071 (HIGH)48 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr49 SOCKS5 TLS upgrade ignores caller timeout in hackney50 https://osv.dev/vulnerability/EEF-CVE-2026-470715152 EEF-CVE-2026-47076 (MEDIUM)53 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq54 SSRF allowlist bypass via percent-encoded host in hackney55 https://osv.dev/vulnerability/EEF-CVE-2026-470765657 EEF-CVE-2026-47069 (LOW)58 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw259 CRLF injection in cookie domain/path options in hackney60 https://osv.dev/vulnerability/EEF-CVE-2026-470696162 EEF-CVE-2026-47075 (MEDIUM)63 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf64 CR/LF injection in query parameter in hackney65 https://osv.dev/vulnerability/EEF-CVE-2026-4707566 hex_prefix 0.1.067 hpax 1.1.068 httpoison 1.8.269 idna 6.1.170 interactive_cmd 0.1.471 jason 1.1.272 keccakf1600_orig 2.0.073 libsecp256k1 0.1.1074 merkle_patricia_tree 0.2.875 metrics 1.0.176 mimerl 1.5.077 mint 1.11.078 mix_erlang_tasks 0.1.079 nerves 2.0.0-pre.280 nerves_discovery 0.1.581 nerves_logging 0.2.482 nerves_runtime 0.13.1383 nerves_system_bbb 2.30.284 nerves_system_br 1.34.485 nerves_system_mangopi_mq_pro 0.17.286 nerves_system_qemu_aarch64 0.4.287 nerves_system_rpi0 2.1.288 nerves_system_rpi4 2.1.289 nerves_system_rpi5 2.1.290 nerves_system_trellis 0.5.091 nerves_system_x86_64 1.34.292 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.193 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.194 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.195 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.196 nerves_toolchain_x86_64_nerves_linux_musl 15.3.197 nerves_uevent 0.1.798 parse_trans 3.4.199 property_table 0.3.4100 protobuf 0.5.4101 ranch 2.3.0102 ring_logger 0.11.7103 ssl_verify_fun 1.1.7104 tablet 0.3.3105 telemetry 1.4.2106 toolshed 0.5.0107 uboot_env 1.0.2108 unicode_util_compat 0.7.1109* Getting forge (Hex package)110* Getting nerves (Hex package)111* Getting ring_logger (Hex package)112* Getting toolshed (Hex package)113* Getting nerves_runtime (Hex package)114* Getting nerves_system_bbb (Hex package)115* Getting nerves_system_mangopi_mq_pro (Hex package)116* Getting nerves_system_qemu_aarch64 (Hex package)117* Getting nerves_system_rpi0 (Hex package)118* Getting nerves_system_rpi4 (Hex package)119* Getting nerves_system_rpi5 (Hex package)120* Getting nerves_system_trellis (Hex package)121* Getting nerves_system_x86_64 (Hex package)122* Getting nerves_system_br (Hex package)123* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)124* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)125* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)126* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)127* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)128* Getting nerves_logging (Hex package)129* Getting nerves_uevent (Hex package)130* Getting uboot_env (Hex package)131* Getting elixir_make (Hex package)132* Getting property_table (Hex package)133* Getting circular_buffer (Hex package)134* Getting interactive_cmd (Hex package)135* Getting nerves_discovery (Hex package)136* Getting tablet (Hex package)137* Getting aes256 (Hex package)138* Getting ex_abci (Hex package)139* Getting httpoison (Hex package)140* Getting jason (Hex package)141* Getting keccakf1600 (Hex package)142* Getting libsecp256k1 (Hex package)143* Getting merkle_patricia_tree (Hex package)144* Getting protobuf (Hex package)145* Getting ex_rlp (Hex package)146* Getting exleveldb (Hex package)147* Getting hex_prefix (Hex package)148* Getting eleveldb (Hex package)149* Getting mix_erlang_tasks (Hex package)150* Getting hackney (Hex package)151* Getting certifi (Hex package)152* Getting idna (Hex package)153* Getting metrics (Hex package)154* Getting mimerl (Hex package)155* Getting parse_trans (Hex package)156* Getting ssl_verify_fun (Hex package)157* Getting unicode_util_compat (Hex package)158* Getting ex_abci_proto (Hex package)159* Getting google_protos (Hex package)160* Getting grpc (Hex package)161* Getting cowboy (Hex package)162* Getting cowlib (Hex package)163* Getting gun (Hex package)164* Getting mint (Hex package)165* Getting telemetry (Hex package)166* Getting hpax (Hex package)167* Getting ranch (Hex package)168Found packages with security advisories, see above for details169You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more170 warning: function docs/0 is unused171 │172 53 │ defp docs do173 │ ~174 │175 └─ /work/proj/deps_rpi4/aes256/mix.exs:53:8: Aes256.Mixfile (module)176177 error: undefined variable "description"178 │179 9 │ description: description,180 │ ^^^^^^^^^^^181 │182 └─ /work/proj/deps_rpi4/mix_erlang_tasks/mix.exs:9:20: MixErlangTasks.Mixfile.project/0183184 error: undefined variable "package"185 │186 10 │ package: package,187 │ ^^^^^^^188 │189 └─ /work/proj/deps_rpi4/mix_erlang_tasks/mix.exs:10:16: MixErlangTasks.Mixfile.project/0190191Error while loading project :mix_erlang_tasks at /work/proj/deps_rpi4/mix_erlang_tasks192** (CompileError) deps_rpi4/mix_erlang_tasks/mix.exs: cannot compile module MixErlangTasks.Mixfile (errors have been logged)193