nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.153s3Unchanged:4  bunch 1.6.45  certifi 2.17.06  circular_buffer 1.1.07  coerce 1.0.28  cowlib 2.7.3 VULNERABLE!9    EEF-CVE-2026-59248 (HIGH)10    aka: CVE-2026-5924811    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS12    https://osv.dev/vulnerability/EEF-CVE-2026-592481314    EEF-CVE-2026-43970 (HIGH)15    aka: CVE-2026-43970, GHSA-84f2-rp86-235p16    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame17    https://osv.dev/vulnerability/EEF-CVE-2026-439701819    EEF-CVE-2026-43968 (MEDIUM)20    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r21    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/122    https://osv.dev/vulnerability/EEF-CVE-2026-439682324    EEF-CVE-2026-7790 (HIGH)25    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6526    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS27    https://osv.dev/vulnerability/EEF-CVE-2026-779028  crc 0.10.629  elixir_make 0.10.030  gun 1.3.3 VULNERABLE!31    EEF-CVE-2026-43973 (HIGH)32    aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7733    gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion34    https://osv.dev/vulnerability/EEF-CVE-2026-439733536    GHSA-w4f7-4cxr-rv3c (MEDIUM)37    aka: CVE-2026-43966, EEF-CVE-2026-4396638    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability39    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c40  ibm_speech_to_text 0.3.041  interactive_cmd 0.1.442  jason 1.4.543  membrane_caps_audio_flac 0.1.2 RETIRED!44    (renamed) Renamed to membrane_flac_format45  membrane_core 1.3.446  membrane_element_ibm_speech_to_text 0.9.047  membrane_file_plugin 0.16.048  membrane_flac_format 0.2.249  membrane_flac_plugin 0.11.050  nerves 2.0.0-pre.251  nerves_discovery 0.1.552  nerves_logging 0.2.453  nerves_runtime 0.13.1354  nerves_system_bbb 2.30.255  nerves_system_br 1.34.456  nerves_system_mangopi_mq_pro 0.17.257  nerves_system_qemu_aarch64 0.4.258  nerves_system_rpi0 2.1.259  nerves_system_rpi4 2.1.260  nerves_system_rpi5 2.1.261  nerves_system_trellis 0.5.062  nerves_system_x86_64 1.34.263  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.164  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.165  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.166  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.167  nerves_toolchain_x86_64_nerves_linux_musl 15.3.168  nerves_uevent 0.1.769  numbers 5.2.570  property_table 0.3.471  qex 0.5.272  ratio 4.0.173  ring_logger 0.11.774  tablet 0.3.375  telemetry 1.4.276  toolshed 0.5.077  uboot_env 1.0.278* Getting membrane_element_ibm_speech_to_text (Hex package)79* Getting nerves (Hex package)80* Getting ring_logger (Hex package)81* Getting toolshed (Hex package)82* Getting nerves_runtime (Hex package)83* Getting nerves_system_bbb (Hex package)84* Getting nerves_system_mangopi_mq_pro (Hex package)85* Getting nerves_system_qemu_aarch64 (Hex package)86* Getting nerves_system_rpi0 (Hex package)87* Getting nerves_system_rpi4 (Hex package)88* Getting nerves_system_rpi5 (Hex package)89* Getting nerves_system_trellis (Hex package)90* Getting nerves_system_x86_64 (Hex package)91* Getting nerves_system_br (Hex package)92* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)93* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)94* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)95* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)96* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)97* Getting nerves_logging (Hex package)98* Getting nerves_uevent (Hex package)99* Getting uboot_env (Hex package)100* Getting elixir_make (Hex package)101* Getting property_table (Hex package)102* Getting circular_buffer (Hex package)103* Getting interactive_cmd (Hex package)104* Getting nerves_discovery (Hex package)105* Getting tablet (Hex package)106* Getting ibm_speech_to_text (Hex package)107* Getting membrane_caps_audio_flac (Hex package)108* Getting membrane_core (Hex package)109* Getting membrane_file_plugin (Hex package)110* Getting membrane_flac_plugin (Hex package)111* Getting crc (Hex package)112* Getting membrane_flac_format (Hex package)113* Getting bunch (Hex package)114* Getting qex (Hex package)115* Getting ratio (Hex package)116* Getting telemetry (Hex package)117* Getting numbers (Hex package)118* Getting coerce (Hex package)119* Getting certifi (Hex package)120* Getting gun (Hex package)121* Getting jason (Hex package)122* Getting cowlib (Hex package)123Found retired packages, see above for details124Found packages with security advisories, see above for details125==> nerves_system_br126Generated nerves_system_br app127==> circular_buffer128Compiling 1 file (.ex)129Generated circular_buffer app130==> jason131Compiling 10 files (.ex)132Generated jason app133==> membrane_flac_format134Compiling 3 files (.ex)135Generated membrane_flac_format app136==> coerce137Compiling 3 files (.ex)138Generated coerce app139==> bunch140Compiling 19 files (.ex)141Generated bunch app142==> tablet143Compiling 2 files (.ex)144Generated tablet app145==> numbers146Compiling 7 files (.ex)147Generated numbers app148==> elixir_make149Compiling 8 files (.ex)150Generated elixir_make app151==> nerves_logging152 CC kmsg_tailer.o153 LD kmsg_tailer154Compiling 5 files (.ex)155Generated nerves_logging app156==> crc157 C      checksum_xor.c158 C      crc_8.c159 C      crc_algorithm.c160 C      crc_model.c161 C      crc_nif.c162 C      crc_resource.c163 C      xnif_slice.c164 LD     crc_nif.so165Compiling 7 files (.erl)166Compiling 3 files (.ex)167Generated crc app168==> nerves_compatibility_test169===> Analyzing applications...170===> Compiling cowlib171===> Compiling src/cow_sse.erl failed172    ┌─ src/cow_sse.erl:173    │174 56 │  	-> {event, parsed_event(), State} | {more, State}.175    │  	                           ╰── type variable 'State' is only used once (is unbound)176177178** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/trellis/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"