Build log
nerves_system_x86_64
helix 0.1.6-rc · fail · run helix-0.1.6-rc-1791193982326
513 of 513 lines
1Resolving Hex dependencies...2Resolution completed in 0.53s3Unchanged:4 castore 1.0.215 certifi 2.15.06 circular_buffer 1.1.07 colour_hash 1.0.38 cowboy 2.9.0 VULNERABLE!9 EEF-CVE-2026-8466 (HIGH)10 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x811 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy12 https://osv.dev/vulnerability/EEF-CVE-2026-84661314 GHSA-w4f7-4cxr-rv3c (MEDIUM)15 aka: CVE-2026-43966, EEF-CVE-2026-4396616 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability17 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c1819 EEF-CVE-2026-65624 (MEDIUM)20 aka: CVE-2026-6562421 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion22 https://osv.dev/vulnerability/EEF-CVE-2026-6562423 cowboy_telemetry 0.4.024 cowlib 2.11.0 VULNERABLE!25 EEF-CVE-2026-7790 (HIGH)26 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6527 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS28 https://osv.dev/vulnerability/EEF-CVE-2026-77902930 EEF-CVE-2026-43968 (MEDIUM)31 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r32 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/133 https://osv.dev/vulnerability/EEF-CVE-2026-439683435 EEF-CVE-2026-43970 (HIGH)36 aka: CVE-2026-43970, GHSA-84f2-rp86-235p37 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame38 https://osv.dev/vulnerability/EEF-CVE-2026-439703940 EEF-CVE-2026-59248 (HIGH)41 aka: CVE-2026-5924842 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS43 https://osv.dev/vulnerability/EEF-CVE-2026-592484445 EEF-CVE-2026-43969 (LOW)46 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5647 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/148 https://osv.dev/vulnerability/EEF-CVE-2026-439694950 EEF-CVE-2026-43966 (MEDIUM)51 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c52 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/253 https://osv.dev/vulnerability/EEF-CVE-2026-439665455 EEF-CVE-2026-43971 (MEDIUM)56 aka: CVE-2026-4397157 Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/158 https://osv.dev/vulnerability/EEF-CVE-2026-4397159 db_connection 2.10.260 decimal 3.1.161 dotx 0.3.162 ecto 3.14.263 ecto_sql 3.14.064 elixir_make 0.10.065 esbuild 0.10.066 expo 1.1.167 file_system 1.1.168 floki 0.38.469 gettext 0.26.270 gun 2.0.0-rc.2 VULNERABLE!71 EEF-CVE-2026-43973 (HIGH)72 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7773 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion74 https://osv.dev/vulnerability/EEF-CVE-2026-439737576 GHSA-w4f7-4cxr-rv3c (MEDIUM)77 aka: CVE-2026-43966, EEF-CVE-2026-4396678 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability79 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c80 hackney 1.25.0 VULNERABLE!81 EEF-CVE-2026-47071 (HIGH)82 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr83 SOCKS5 TLS upgrade ignores caller timeout in hackney84 https://osv.dev/vulnerability/EEF-CVE-2026-470718586 EEF-CVE-2026-47076 (MEDIUM)87 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq88 SSRF allowlist bypass via percent-encoded host in hackney89 https://osv.dev/vulnerability/EEF-CVE-2026-470769091 EEF-CVE-2026-47069 (LOW)92 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw293 CRLF injection in cookie domain/path options in hackney94 https://osv.dev/vulnerability/EEF-CVE-2026-470699596 EEF-CVE-2026-47075 (MEDIUM)97 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf98 CR/LF injection in query parameter in hackney99 https://osv.dev/vulnerability/EEF-CVE-2026-47075100 helix 0.1.6-rc101 httpoison 1.8.2102 idna 6.1.1103 interactive_cmd 0.1.4104 jason 1.4.5105 json 1.4.1106 meck 0.9.2107 metrics 1.0.1108 mime 2.0.7109 mimerl 1.5.0110 mix_test_watch 1.4.0111 mock 0.3.9112 nerves 2.0.0-pre.2113 nerves_discovery 0.1.5114 nerves_logging 0.2.4115 nerves_runtime 0.13.13116 nerves_system_bbb 2.30.2117 nerves_system_br 1.34.4118 nerves_system_mangopi_mq_pro 0.17.2119 nerves_system_qemu_aarch64 0.4.2120 nerves_system_rpi0 2.1.2121 nerves_system_rpi4 2.1.2122 nerves_system_rpi5 2.1.2123 nerves_system_trellis 0.5.0124 nerves_system_x86_64 1.34.2125 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1126 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1127 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1128 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1129 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1130 nerves_uevent 0.1.7131 nimble_parsec 1.4.2132 openaimt 0.3.3133 parse_trans 3.4.1134 phoenix 1.7.24135 phoenix_ecto 4.7.0136 phoenix_html 3.3.4137 phoenix_live_view 0.18.18 VULNERABLE!138 EEF-CVE-2026-64941 (LOW)139 aka: CVE-2026-64941, GHSA-36m4-rm57-3prf140 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR141 https://osv.dev/vulnerability/EEF-CVE-2026-64941142 phoenix_pubsub 2.3.0143 phoenix_template 1.1.0144 playwrightais 1.32.1-rc145 plug 1.20.3146 plug_cowboy 2.9.0147 plug_crypto 2.2.0148 postgrex 0.22.4149 property_table 0.3.4150 ranch 1.8.0151 readabilityais 0.11.1152 recase 0.9.1153 ring_buffer 0.1.0154 ring_logger 0.11.7155 solid 0.18.0156 ssl_verify_fun 1.1.7157 swoosh 1.28.1158 tablet 0.3.3159 tailwind 0.5.1160 telemetry 1.4.2161 telemetry_metrics 0.6.2162 telemetry_poller 1.3.0163 toolshed 0.5.0164 uboot_env 1.0.2165 unicode_util_compat 0.7.1166 uuid 1.1.8167 websock 0.5.3168 websock_adapter 0.5.9169* Getting helix (Hex package)170* Getting nerves (Hex package)171* Getting ring_logger (Hex package)172* Getting toolshed (Hex package)173* Getting nerves_runtime (Hex package)174* Getting nerves_system_bbb (Hex package)175* Getting nerves_system_mangopi_mq_pro (Hex package)176* Getting nerves_system_qemu_aarch64 (Hex package)177* Getting nerves_system_rpi0 (Hex package)178* Getting nerves_system_rpi4 (Hex package)179* Getting nerves_system_rpi5 (Hex package)180* Getting nerves_system_trellis (Hex package)181* Getting nerves_system_x86_64 (Hex package)182* Getting nerves_system_br (Hex package)183* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)184* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)185* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)186* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)187* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)188* Getting nerves_logging (Hex package)189* Getting nerves_uevent (Hex package)190* Getting uboot_env (Hex package)191* Getting elixir_make (Hex package)192* Getting property_table (Hex package)193* Getting circular_buffer (Hex package)194* Getting interactive_cmd (Hex package)195* Getting nerves_discovery (Hex package)196* Getting tablet (Hex package)197* Getting colour_hash (Hex package)198* Getting dotx (Hex package)199* Getting ecto_sql (Hex package)200* Getting esbuild (Hex package)201* Getting floki (Hex package)202* Getting gettext (Hex package)203* Getting httpoison (Hex package)204* Getting jason (Hex package)205* Getting openaimt (Hex package)206* Getting phoenix (Hex package)207* Getting phoenix_ecto (Hex package)208* Getting phoenix_html (Hex package)209* Getting phoenix_live_view (Hex package)210* Getting playwrightais (Hex package)211* Getting plug_cowboy (Hex package)212* Getting postgrex (Hex package)213* Getting readabilityais (Hex package)214* Getting ring_buffer (Hex package)215* Getting solid (Hex package)216* Getting swoosh (Hex package)217* Getting tailwind (Hex package)218* Getting telemetry_metrics (Hex package)219* Getting telemetry_poller (Hex package)220* Getting uuid (Hex package)221* Getting telemetry (Hex package)222* Getting idna (Hex package)223* Getting mime (Hex package)224* Getting unicode_util_compat (Hex package)225* Getting nimble_parsec (Hex package)226* Getting db_connection (Hex package)227* Getting decimal (Hex package)228* Getting cowboy (Hex package)229* Getting cowboy_telemetry (Hex package)230* Getting plug (Hex package)231* Getting plug_crypto (Hex package)232* Getting cowlib (Hex package)233* Getting ranch (Hex package)234* Getting gun (Hex package)235* Getting recase (Hex package)236* Getting phoenix_template (Hex package)237* Getting ecto (Hex package)238* Getting castore (Hex package)239* Getting phoenix_pubsub (Hex package)240* Getting websock_adapter (Hex package)241* Getting websock (Hex package)242* Getting json (Hex package)243* Getting mix_test_watch (Hex package)244* Getting mock (Hex package)245* Getting meck (Hex package)246* Getting file_system (Hex package)247* Getting hackney (Hex package)248* Getting certifi (Hex package)249* Getting metrics (Hex package)250* Getting mimerl (Hex package)251* Getting parse_trans (Hex package)252* Getting ssl_verify_fun (Hex package)253* Getting expo (Hex package)254Found packages with security advisories, see above for details255You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more256==> ring_buffer257Compiling 1 file (.ex)258Generated ring_buffer app259==> json260Compiling 13 files (.ex)261 warning: redefining module JSON (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.beam)262 │263 1 │ defmodule JSON do264 │ ~~~~~~~~~~~~~~~~~265 │266 └─ lib/json.ex:1: JSON (module)267268 warning: redefining module JSON.Encoder (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.beam)269 │270 1 │ defprotocol JSON.Encoder do271 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~272 │273 └─ lib/json/encoder.ex:1: JSON.Encoder (module)274275 warning: redefining module JSON.Encoder.List (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.List.beam)276 │277 25 │ defimpl JSON.Encoder, for: List do278 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~279 │280 └─ lib/json/encoder/default_implementations.ex:25: JSON.Encoder.List (module)281282 warning: redefining module JSON.Encoder.Integer (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.Integer.beam)283 │284 53 │ defimpl JSON.Encoder, for: [Integer, Float] do285 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~286 │287 └─ lib/json/encoder/default_implementations.ex:53: JSON.Encoder.Integer (module)288289 warning: redefining module JSON.Encoder.Float (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.Float.beam)290 │291 53 │ defimpl JSON.Encoder, for: [Integer, Float] do292 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~293 │294 └─ lib/json/encoder/default_implementations.ex:53: JSON.Encoder.Float (module)295296 warning: redefining module JSON.Encoder.Atom (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.Atom.beam)297 │298 66 │ defimpl JSON.Encoder, for: Atom do299 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~300 │301 └─ lib/json/encoder/default_implementations.ex:66: JSON.Encoder.Atom (module)302303 warning: unused require Logger304 │305 14 │ require Logger306 │ ~307 │308 └─ lib/json/logger.ex:14:3309310 warning: redefining module JSON.Encoder.BitString (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.BitString.beam)311 │312 83 │ defimpl JSON.Encoder, for: BitString do313 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~314 │315 └─ lib/json/encoder/default_implementations.ex:83: JSON.Encoder.BitString (module)316317 warning: redefining module JSON.Encoder.Map (current version loaded from /home/nerves/.elixir/lib/elixir/ebin/Elixir.JSON.Encoder.Map.beam)318 │319 147 │ defimpl JSON.Encoder, for: Map do320 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~321 │322 └─ lib/json/encoder/default_implementations.ex:147: JSON.Encoder.Map (module)323324 warning: using single-quoted strings to represent charlists is deprecated.325 Use ~c"" if you indeed want a charlist or use "" instead.326 You may run "mix format --migrate" to change all single-quoted327 strings to use the ~c sigil and fix this warning.328 │329 89 │ defp apply_exponent({:ok, acc, <<exponent::utf8, rest::binary>>}) when exponent in 'eE' do330 │ ~331 │332 └─ lib/json/parser/number.ex:89:86333334 warning: use Bitwise is deprecated. import Bitwise instead335 │336 8 │ use Bitwise337 │ ~~~~~~~~~~~338 │339 └─ lib/json/parser/string.ex:8: JSON.Parser.String (module)340341 warning: use Bitwise is deprecated. import Bitwise instead342 │343 6 │ use Bitwise344 │ ~~~~~~~~~~~345 │346 └─ lib/json/parser/unicode.ex:6: JSON.Parser.Unicode (module)347348 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Any)349 │350 159 │ defimpl JSON.Encoder, for: Any do351 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~352 │353 └─ lib/json/encoder/default_implementations.ex:159: JSON.Encoder.Any (module)354355 warning: JSON.Encoder.encode/1 is undefined or private. Did you mean:356357 * encode/2358359 │360 25 │ defdelegate encode(term), to: Encoder361 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~362 │363 └─ (elixir 1.20.3) lib/json.ex:25: JSON.encode/1364365 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Map)366 │367 147 │ defimpl JSON.Encoder, for: Map do368 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~369 │370 └─ lib/json/encoder/default_implementations.ex:147: JSON.Encoder.Map (module)371372 warning: JSON.Encoder.encode/1 is undefined or private. Did you mean:373374 * encode/2375376 │377 176 │ |> JSON.Encoder.encode()378 │ ~379 │380 └─ lib/json/encoder/default_implementations.ex:176:21: JSON.Encoder.Any.encode/1381382 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Record)383 │384 135 │ defimpl JSON.Encoder, for: Record do385 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~386 │387 └─ lib/json/encoder/default_implementations.ex:135: JSON.Encoder.Record (module)388389 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.BitString)390 │391 83 │ defimpl JSON.Encoder, for: BitString do392 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~393 │394 └─ lib/json/encoder/default_implementations.ex:83: JSON.Encoder.BitString (module)395396 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Atom)397 │398 66 │ defimpl JSON.Encoder, for: Atom do399 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~400 │401 └─ lib/json/encoder/default_implementations.ex:66: JSON.Encoder.Atom (module)402403 warning: JSON.Encoder.encode/1 is undefined or private. Did you mean:404405 * encode/2406407 │408 73 │ def encode(atom) when is_atom(atom), do: atom |> Atom.to_string() |> JSON.Encoder.encode()409 │ ~410 │411 └─ (elixir 1.20.3) lib/json/encoder/default_implementations.ex:73:85: JSON.Encoder.Atom.encode/1412413 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Float)414 │415 53 │ defimpl JSON.Encoder, for: [Integer, Float] do416 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~417 │418 └─ lib/json/encoder/default_implementations.ex:53: JSON.Encoder.Float (module)419420 warning: JSON.Encoder.encode/1 is undefined or private. Did you mean:421422 * encode/2423424 │425 28 │ case Encoder.encode(item) do426 │ ~427 │428 └─ lib/json/encoder/helpers.ex:28:18: JSON.Encoder.Helpers.encode_item/1429430 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Integer)431 │432 53 │ defimpl JSON.Encoder, for: [Integer, Float] do433 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~434 │435 └─ lib/json/encoder/default_implementations.ex:53: JSON.Encoder.Integer (module)436437 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.List)438 │439 25 │ defimpl JSON.Encoder, for: List do440 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~441 │442 └─ lib/json/encoder/default_implementations.ex:25: JSON.Encoder.List (module)443444 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.HashDict)445 │446 13 │ defimpl JSON.Encoder, for: HashDict do447 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~448 │449 └─ lib/json/encoder/default_implementations.ex:13: JSON.Encoder.HashDict (module)450451 warning: function encode/2 required by protocol JSON.Encoder is not implemented (in module JSON.Encoder.Tuple)452 │453 1 │ defimpl JSON.Encoder, for: Tuple do454 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~455 │456 └─ lib/json/encoder/default_implementations.ex:1: JSON.Encoder.Tuple (module)457458Generated json app459==> dotx460warning: in order to compile .yrl files, you must add "compilers: [:yecc] ++ Mix.compilers()" to the "def project" section of dotx's mix.exs461Compiling 1 file (.yrl)462src/dot_parser.yrl: Warning: conflicts: 0 shift/reduce, 0 reduce/reduce463warning: in order to compile .xrl files, you must add "compilers: [:leex] ++ Mix.compilers()" to the "def project" section of dotx's mix.exs464Compiling 1 file (.xrl)465Compiling 2 files (.erl)466Compiling 4 files (.ex)467 warning: the variable "bytes" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator468 │469 102 │ <<prefix::binary-size(bytes)>> <> _ = html470 │ ~471 │472 └─ lib/dotx_decode.ex:102:37: Dotx.HTML.trim/1473474 warning: the variable "bytes" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator475 │476 107 │ Enum.map_join(lines, "\n", fn <<_::binary-size(bytes)>> <> rest -> rest; o -> o end)477 │ ~478 │479 └─ lib/dotx_decode.ex:107:66: Dotx.HTML.trim/1480481 warning: the right-hand side of || will always execute:482483 id484485 because the left-hand side always evaluates to:486487 dynamic(nil)488489 where "x" (context Kernel) was given the type:490491 # type: dynamic(nil)492 # from: lib/helpers.ex:32493 x494495 type warning found at:496 │497 32 │ {graph,i} = case id do nil-> {%{graph| id: id || "x#{i}"},i+1}; _-> {graph,i} end498 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~499 │500 └─ lib/helpers.ex:32: Dotx.Helpers.identify/2501502Generated dotx app503==> nerves_compatibility_test504===> Analyzing applications...505===> Compiling cowlib506===> Compiling src/cow_sse.erl failed507 ┌─ src/cow_sse.erl:508 │509 56 │ -> {event, parsed_event(), State} | {more, State}.510 │ ╰── type variable 'State' is only used once (is unbound)511512513** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/x86_64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"