Build log
host
gcloud_speech_grpc 0.4.0 · fail · run gcloud_speech_grpc-0.4.0-1791188310848
122 of 122 lines
1Resolving Hex dependencies...2Resolution completed in 0.299s3Unchanged:4 certifi 2.17.05 circular_buffer 1.1.06 cowboy 2.6.3 VULNERABLE!7 EEF-CVE-2026-8466 (HIGH)8 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x89 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy10 https://osv.dev/vulnerability/EEF-CVE-2026-84661112 EEF-CVE-2026-65624 (MEDIUM)13 aka: CVE-2026-6562414 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion15 https://osv.dev/vulnerability/EEF-CVE-2026-656241617 GHSA-w4f7-4cxr-rv3c (MEDIUM)18 aka: CVE-2026-43966, EEF-CVE-2026-4396619 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability20 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c21 cowlib 2.7.3 VULNERABLE!22 EEF-CVE-2026-59248 (HIGH)23 aka: CVE-2026-5924824 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS25 https://osv.dev/vulnerability/EEF-CVE-2026-592482627 EEF-CVE-2026-43970 (HIGH)28 aka: CVE-2026-43970, GHSA-84f2-rp86-235p29 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame30 https://osv.dev/vulnerability/EEF-CVE-2026-439703132 EEF-CVE-2026-43968 (MEDIUM)33 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r34 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/135 https://osv.dev/vulnerability/EEF-CVE-2026-439683637 EEF-CVE-2026-7790 (HIGH)38 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6539 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS40 https://osv.dev/vulnerability/EEF-CVE-2026-779041 elixir_make 0.10.042 finch 0.24.043 gcloud_speech_grpc 0.4.044 goth 1.4.545 grpc 0.3.1 VULNERABLE!46 EEF-CVE-2026-48854 (HIGH)47 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj48 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc49 https://osv.dev/vulnerability/EEF-CVE-2026-4885450 gun 1.3.3 VULNERABLE!51 EEF-CVE-2026-43973 (HIGH)52 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7753 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion54 https://osv.dev/vulnerability/EEF-CVE-2026-439735556 GHSA-w4f7-4cxr-rv3c (MEDIUM)57 aka: CVE-2026-43966, EEF-CVE-2026-4396658 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability59 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c60 hpax 1.1.061 interactive_cmd 0.1.462 jason 1.4.563 jose 1.11.1264 mime 2.0.765 mint 1.11.066 nerves 2.0.0-pre.267 nerves_discovery 0.1.568 nerves_logging 0.2.469 nerves_runtime 0.13.1370 nerves_system_bbb 2.30.271 nerves_system_br 1.34.472 nerves_system_mangopi_mq_pro 0.17.273 nerves_system_qemu_aarch64 0.4.274 nerves_system_rpi0 2.1.275 nerves_system_rpi4 2.1.276 nerves_system_rpi5 2.1.277 nerves_system_trellis 0.5.078 nerves_system_x86_64 1.34.279 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.180 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.181 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.182 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.183 nerves_toolchain_x86_64_nerves_linux_musl 15.3.184 nerves_uevent 0.1.785 nimble_options 1.1.186 nimble_pool 1.1.087 property_table 0.3.488 protobuf 0.6.389 ranch 1.7.190 ring_logger 0.11.791 tablet 0.3.392 telemetry 1.4.293 toolshed 0.5.094 uboot_env 1.0.295Found packages with security advisories, see above for details96All dependencies have been fetched97===> Analyzing applications...98===> Compiling ranch99 ┌─ src/ranch_ssl.erl:100 │101 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of102 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead103104105 ┌─ src/ranch_conns_sup.erl:106 │107 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},108 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.109Compile directive 'nowarn_deprecated_catch' can be used to suppress110warnings in selected modules.111112113===> Analyzing applications...114===> Compiling cowlib115===> Compiling src/cow_sse.erl failed116 ┌─ src/cow_sse.erl:117 │118 56 │ -> {event, parsed_event(), State} | {more, State}.119 │ ╰── type variable 'State' is only used once (is unbound)120121122** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/host/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"