nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.186s3Unchanged:4  circular_buffer 1.1.05  cowlib 2.7.3 VULNERABLE!6    EEF-CVE-2026-59248 (HIGH)7    aka: CVE-2026-592488    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS9    https://osv.dev/vulnerability/EEF-CVE-2026-592481011    EEF-CVE-2026-43970 (HIGH)12    aka: CVE-2026-43970, GHSA-84f2-rp86-235p13    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame14    https://osv.dev/vulnerability/EEF-CVE-2026-439701516    EEF-CVE-2026-43968 (MEDIUM)17    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r18    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/119    https://osv.dev/vulnerability/EEF-CVE-2026-439682021    EEF-CVE-2026-7790 (HIGH)22    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6523    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS24    https://osv.dev/vulnerability/EEF-CVE-2026-779025  elixir_make 0.10.026  glock 0.1.127  gun 1.3.3 VULNERABLE!28    EEF-CVE-2026-43973 (HIGH)29    aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7730    gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion31    https://osv.dev/vulnerability/EEF-CVE-2026-439733233    GHSA-w4f7-4cxr-rv3c (MEDIUM)34    aka: CVE-2026-43966, EEF-CVE-2026-4396635    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability36    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c37  interactive_cmd 0.1.438  nerves 2.0.0-pre.239  nerves_discovery 0.1.540  nerves_logging 0.2.441  nerves_runtime 0.13.1342  nerves_system_bbb 2.30.243  nerves_system_br 1.34.444  nerves_system_mangopi_mq_pro 0.17.245  nerves_system_qemu_aarch64 0.4.246  nerves_system_rpi0 2.1.247  nerves_system_rpi4 2.1.248  nerves_system_rpi5 2.1.249  nerves_system_trellis 0.5.050  nerves_system_x86_64 1.34.251  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.152  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.153  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.154  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.155  nerves_toolchain_x86_64_nerves_linux_musl 15.3.156  nerves_uevent 0.1.757  property_table 0.3.458  ring_logger 0.11.759  tablet 0.3.360  toolshed 0.5.061  uboot_env 1.0.262* Getting glock (Hex package)63* Getting nerves (Hex package)64* Getting ring_logger (Hex package)65* Getting toolshed (Hex package)66* Getting nerves_runtime (Hex package)67* Getting nerves_system_bbb (Hex package)68* Getting nerves_system_mangopi_mq_pro (Hex package)69* Getting nerves_system_qemu_aarch64 (Hex package)70* Getting nerves_system_rpi0 (Hex package)71* Getting nerves_system_rpi4 (Hex package)72* Getting nerves_system_rpi5 (Hex package)73* Getting nerves_system_trellis (Hex package)74* Getting nerves_system_x86_64 (Hex package)75* Getting nerves_system_br (Hex package)76* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)77* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)78* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)79* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)80* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)81* Getting nerves_logging (Hex package)82* Getting nerves_uevent (Hex package)83* Getting uboot_env (Hex package)84* Getting elixir_make (Hex package)85* Getting property_table (Hex package)86* Getting circular_buffer (Hex package)87* Getting interactive_cmd (Hex package)88* Getting nerves_discovery (Hex package)89* Getting tablet (Hex package)90* Getting cowlib (Hex package)91* Getting gun (Hex package)92Found packages with security advisories, see above for details93==> nerves_system_br94Generated nerves_system_br app95==> circular_buffer96Compiling 1 file (.ex)97Generated circular_buffer app98==> tablet99Compiling 2 files (.ex)100Generated tablet app101==> elixir_make102Compiling 8 files (.ex)103Generated elixir_make app104==> nerves_logging105 CC kmsg_tailer.o106 LD kmsg_tailer107Compiling 5 files (.ex)108Generated nerves_logging app109==> nerves_compatibility_test110===> Analyzing applications...111===> Compiling cowlib112===> Compiling src/cow_sse.erl failed113    ┌─ src/cow_sse.erl:114    │115 56 │  	-> {event, parsed_event(), State} | {more, State}.116    │  	                           ╰── type variable 'State' is only used once (is unbound)117118119** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/trellis/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"