Build log
host
membrane_element_gcloud_speech_to_text 0.10.0 · fail · run membrane_element_gcloud_speech_to_text-0.10.0-1790990354478
362 of 362 lines
1Resolving Hex dependencies...2Resolution completed in 0.335s3Unchanged:4 bunch 1.6.45 certifi 2.17.06 circular_buffer 1.1.07 coerce 1.0.28 cowboy 2.6.3 VULNERABLE!9 EEF-CVE-2026-8466 (HIGH)10 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x811 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy12 https://osv.dev/vulnerability/EEF-CVE-2026-84661314 EEF-CVE-2026-65624 (MEDIUM)15 aka: CVE-2026-6562416 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion17 https://osv.dev/vulnerability/EEF-CVE-2026-656241819 GHSA-w4f7-4cxr-rv3c (MEDIUM)20 aka: CVE-2026-43966, EEF-CVE-2026-4396621 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability22 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c23 cowlib 2.7.3 VULNERABLE!24 EEF-CVE-2026-59248 (HIGH)25 aka: CVE-2026-5924826 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS27 https://osv.dev/vulnerability/EEF-CVE-2026-592482829 EEF-CVE-2026-43970 (HIGH)30 aka: CVE-2026-43970, GHSA-84f2-rp86-235p31 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame32 https://osv.dev/vulnerability/EEF-CVE-2026-439703334 EEF-CVE-2026-43968 (MEDIUM)35 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r36 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/137 https://osv.dev/vulnerability/EEF-CVE-2026-439683839 EEF-CVE-2026-7790 (HIGH)40 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6541 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS42 https://osv.dev/vulnerability/EEF-CVE-2026-779043 elixir_make 0.10.044 finch 0.24.045 gcloud_speech_grpc 0.4.046 goth 1.4.547 grpc 0.3.1 VULNERABLE!48 EEF-CVE-2026-48854 (HIGH)49 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj50 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc51 https://osv.dev/vulnerability/EEF-CVE-2026-4885452 gun 1.3.3 VULNERABLE!53 EEF-CVE-2026-43973 (HIGH)54 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7755 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion56 https://osv.dev/vulnerability/EEF-CVE-2026-439735758 GHSA-w4f7-4cxr-rv3c (MEDIUM)59 aka: CVE-2026-43966, EEF-CVE-2026-4396660 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability61 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c62 hpax 1.1.063 interactive_cmd 0.1.464 jason 1.4.565 jose 1.11.1266 membrane_core 1.3.467 membrane_element_gcloud_speech_to_text 0.10.068 membrane_flac_format 0.2.269 mime 2.0.770 mint 1.11.071 nerves 2.0.0-pre.272 nerves_discovery 0.1.573 nerves_logging 0.2.474 nerves_runtime 0.13.1375 nerves_system_bbb 2.30.276 nerves_system_br 1.34.477 nerves_system_mangopi_mq_pro 0.17.278 nerves_system_qemu_aarch64 0.4.279 nerves_system_rpi0 2.1.280 nerves_system_rpi4 2.1.281 nerves_system_rpi5 2.1.282 nerves_system_trellis 0.5.083 nerves_system_x86_64 1.34.284 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.185 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.186 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.187 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.188 nerves_toolchain_x86_64_nerves_linux_musl 15.3.189 nerves_uevent 0.1.790 nimble_options 1.1.191 nimble_pool 1.1.092 numbers 5.2.593 property_table 0.3.494 protobuf 0.6.395 qex 0.5.296 ranch 1.7.197 ratio 4.0.198 ring_logger 0.11.799 tablet 0.3.3100 telemetry 1.4.2101 toolshed 0.5.0102 uboot_env 1.0.2103Found packages with security advisories, see above for details104All dependencies have been fetched105==> membrane_flac_format106Compiling 3 files (.ex)107Generated membrane_flac_format app108==> jose109Compiling 113 files (.erl)110src/jose_server.erl:137:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.111Compile directive 'nowarn_deprecated_catch' can be used to suppress112warnings in selected modules.113% 137| _ = catch jose_jwa:unsecured_signing(UnsecuredSigning),114% | ^115116src/jose_server.erl:797:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.117Compile directive 'nowarn_deprecated_catch' can be used to suppress118warnings in selected modules.119% 797| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, PlainText, true) of120% | ^121122src/jose_server.erl:799:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.123Compile directive 'nowarn_deprecated_catch' can be used to suppress124warnings in selected modules.125% 799| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, CipherText, false) of126% | ^127128src/jose_server.erl:809:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.129Compile directive 'nowarn_deprecated_catch' can be used to suppress130warnings in selected modules.131% 809| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, PlainText, true) of132% | ^133134src/jose_server.erl:811:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.135Compile directive 'nowarn_deprecated_catch' can be used to suppress136warnings in selected modules.137% 811| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, CipherText, false) of138% | ^139140src/jose_server.erl:821:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.141Compile directive 'nowarn_deprecated_catch' can be used to suppress142warnings in selected modules.143% 821| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, PlainText}, true) of144% | ^145146src/jose_server.erl:823:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.147Compile directive 'nowarn_deprecated_catch' can be used to suppress148warnings in selected modules.149% 823| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, CipherText, CipherTag}, false) of150% | ^151152src/jose_server.erl:837:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.153Compile directive 'nowarn_deprecated_catch' can be used to suppress154warnings in selected modules.155% 837| case catch public_key:encrypt_public(PlainText, PublicKey, FutureOptions) of156% | ^157158src/jose_server.erl:840:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.159Compile directive 'nowarn_deprecated_catch' can be used to suppress160warnings in selected modules.161% 840| case catch public_key:decrypt_private(CipherText, PrivateKey, FutureOptions) of162% | ^163164src/jose_server.erl:842:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.165Compile directive 'nowarn_deprecated_catch' can be used to suppress166warnings in selected modules.167% 842| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, FutureOptions) of168% | ^169170src/jose_server.erl:859:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.171Compile directive 'nowarn_deprecated_catch' can be used to suppress172warnings in selected modules.173% 859| case catch public_key:encrypt_public(PlainText, PublicKey, LegacyOptions) of174% | ^175176src/jose_server.erl:862:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.177Compile directive 'nowarn_deprecated_catch' can be used to suppress178warnings in selected modules.179% 862| case catch public_key:decrypt_private(CipherText, PrivateKey, LegacyOptions) of180% | ^181182src/jose_server.erl:864:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.183Compile directive 'nowarn_deprecated_catch' can be used to suppress184warnings in selected modules.185% 864| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, LegacyOptions) of186% | ^187188src/jose_server.erl:882:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.189Compile directive 'nowarn_deprecated_catch' can be used to suppress190warnings in selected modules.191% 882| case catch public_key:sign(Message, DigestType, PrivateKey, Options) of192% | ^193194src/jose_server.erl:885:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.195Compile directive 'nowarn_deprecated_catch' can be used to suppress196warnings in selected modules.197% 885| case catch public_key:verify(Message, DigestType, Signature, PublicKey, Options) of198% | ^199200src/jose_server.erl:897:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.201Compile directive 'nowarn_deprecated_catch' can be used to suppress202warnings in selected modules.203% 897| case catch public_key:sign(Message, DigestType, PrivateKey) of204% | ^205206src/jose_server.erl:900:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.207Compile directive 'nowarn_deprecated_catch' can be used to suppress208warnings in selected modules.209% 900| case catch public_key:verify(Message, DigestType, Signature, PublicKey) of210% | ^211212src/jwa/jose_jwa.erl:230:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.213Compile directive 'nowarn_deprecated_catch' can be used to suppress214warnings in selected modules.215% 230| case catch block_cipher(Cipher) of216% | ^217218src/jwa/jose_jwa.erl:238:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.219Compile directive 'nowarn_deprecated_catch' can be used to suppress220warnings in selected modules.221% 238| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, chacha20_poly1305_module, 2)) of222% | ^223224src/jwa/jose_jwa.erl:246:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.225Compile directive 'nowarn_deprecated_catch' can be used to suppress226warnings in selected modules.227% 246| case catch rsa_crypt(Padding) of228% | ^229230src/jwa/jose_jwa.erl:254:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.231Compile directive 'nowarn_deprecated_catch' can be used to suppress232warnings in selected modules.233% 254| case catch rsa_sign(Padding) of234% | ^235236src/jwa/jose_jwa.erl:262:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.237Compile directive 'nowarn_deprecated_catch' can be used to suppress238warnings in selected modules.239% 262| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, xchacha20_poly1305_module, 2)) of240% | ^241242Compiling 8 files (.ex)243Generated jose app244==> nerves_compatibility_test245===> Analyzing applications...246===> Compiling ranch247 ┌─ src/ranch_ssl.erl:248 │249 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of250 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead251252253 ┌─ src/ranch_conns_sup.erl:254 │255 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},256 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.257Compile directive 'nowarn_deprecated_catch' can be used to suppress258warnings in selected modules.259260261==> protobuf262Compiling 20 files (.ex)263 warning: this clause cannot match because a previous clause at line 253 matches the same pattern as this clause264 │265 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:266 │ ~267 │268 └─ lib/protobuf/dsl.ex:254:8269270 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead271 │272 119 │ val = decode_type_m(type, key, val)273 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~274 │275 └─ lib/protobuf/decoder.ex:119: Protobuf.Decoder.build_struct/3276277 warning: the variable "len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator278 │279 270 │ <<bytes::bytes-size(len), rest::bits>> = bin280 │ ~281 │282 └─ lib/protobuf/decoder.ex:270:25: Protobuf.Decoder.raw_handle_varint/4283284warning: pattern matching on 0.0 is equivalent to matching only on +0.0. Instead you must match on +0.0 or -0.0285└─ lib/protobuf/encoder.ex: Protobuf.Encoder.skip_field?/3286287 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead288 │289 303 │ decode_type_m(type, key, v)290 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~291 │292 └─ lib/protobuf/decoder.ex:303: Protobuf.Decoder.put_packed_field/3293294 warning: System.stacktrace/0 is deprecated. Use __STACKTRACE__ instead295 │296 65 │ stacktrace = System.stacktrace()297 │ ~298 │299 └─ lib/protobuf/encoder.ex:65:27: Protobuf.Encoder.encode_fields/5300301 warning: incompatible types given to Protobuf.Decoder.decode/2:302303 Protobuf.Decoder.decode(data, mod)304305 given types:306307 -dynamic(%{..., __struct__: atom()})-, dynamic(atom())308309 but expected one of:310311 bitstring(), atom()312313 where "data" was given the type:314315 # type: dynamic(%{..., __struct__: atom()})316 # from: lib/protobuf.ex:29:21317 %mod{} = data318319 where "mod" was given the type:320321 # type: dynamic(atom())322 # from: lib/protobuf.ex:29:21323 %mod{} = data324325 type warning found at:326 │327 30 │ Protobuf.Decoder.decode(data, mod)328 │ ~329 │330 └─ lib/protobuf.ex:30:22: Protobuf.decode/1331332 warning: the following clause is redundant:333334 defp cal_repeated(_props, %{repeated: true, oneof: true})335336 it has type:337338 dynamic(), %{..., oneof: true, repeated: true}339340 previous clauses have already matched on the following types:341342 %{..., map?: true}, term()343 term(), %{..., repeated: true}344345 │346 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:347 │ ~348 │349 └─ lib/protobuf/dsl.ex:254:8: Protobuf.DSL.cal_repeated/2350351Generated protobuf app352==> nerves_compatibility_test353===> Analyzing applications...354===> Compiling cowlib355===> Compiling src/cow_sse.erl failed356 ┌─ src/cow_sse.erl:357 │358 56 │ -> {event, parsed_event(), State} | {more, State}.359 │ ╰── type variable 'State' is only used once (is unbound)360361362** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/host/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"