phoenix_token_auth

Build log

host

phoenix_token_auth 0.4.0 · fail · run phoenix_token_auth-0.4.0-1791064428816
137 of 137 lines
1Resolving Hex dependencies...2Resolution completed in 1.15s3Unchanged:4  certifi 2.15.05  circular_buffer 1.1.06  combine 0.10.07  comeonin 2.0.38  connection 1.0.49  cowboy 1.0.4 VULNERABLE!10    GHSA-w4f7-4cxr-rv3c (MEDIUM)11    aka: CVE-2026-43966, EEF-CVE-2026-4396612    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability13    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c14  cowlib 1.0.2 VULNERABLE!15    EEF-CVE-2026-7790 (HIGH)16    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6517    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS18    https://osv.dev/vulnerability/EEF-CVE-2026-77901920    EEF-CVE-2026-43970 (HIGH)21    aka: CVE-2026-43970, GHSA-84f2-rp86-235p22    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame23    https://osv.dev/vulnerability/EEF-CVE-2026-4397024  db_connection 1.1.325  decimal 1.9.0 VULNERABLE!26    EEF-CVE-2026-32686 (MEDIUM)27    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v28    Unbounded exponent in decimal enables unauthenticated DoS29    https://osv.dev/vulnerability/EEF-CVE-2026-3268630  ecto 1.1.931  elixir_make 0.10.032  hackney 1.25.0 VULNERABLE!33    EEF-CVE-2026-47071 (HIGH)34    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr35    SOCKS5 TLS upgrade ignores caller timeout in hackney36    https://osv.dev/vulnerability/EEF-CVE-2026-470713738    EEF-CVE-2026-47076 (MEDIUM)39    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq40    SSRF allowlist bypass via percent-encoded host in hackney41    https://osv.dev/vulnerability/EEF-CVE-2026-470764243    EEF-CVE-2026-47069 (LOW)44    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw245    CRLF injection in cookie domain/path options in hackney46    https://osv.dev/vulnerability/EEF-CVE-2026-470694748    EEF-CVE-2026-47075 (MEDIUM)49    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf50    CR/LF injection in query parameter in hackney51    https://osv.dev/vulnerability/EEF-CVE-2026-4707552  idna 6.1.153  interactive_cmd 0.1.454  joken 0.13.155  mailgun 0.1.256  metrics 1.0.157  mime 2.0.758  mimerl 1.5.059  nerves 2.0.0-pre.260  nerves_discovery 0.1.561  nerves_logging 0.2.462  nerves_runtime 0.13.1363  nerves_system_bbb 2.30.264  nerves_system_br 1.34.465  nerves_system_mangopi_mq_pro 0.17.266  nerves_system_qemu_aarch64 0.4.267  nerves_system_rpi0 2.1.268  nerves_system_rpi4 2.1.269  nerves_system_rpi5 2.1.270  nerves_system_trellis 0.5.071  nerves_system_x86_64 1.34.272  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.173  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.174  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.175  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.176  nerves_toolchain_x86_64_nerves_linux_musl 15.3.177  nerves_uevent 0.1.778  parse_trans 3.4.179  phoenix 1.1.2 VULNERABLE!80    GHSA-cmfh-8f8r-fj96 (MEDIUM)81    aka: CVE-2017-100016382    Phoenix Arbitrary URL Redirect83    https://osv.dev/vulnerability/GHSA-cmfh-8f8r-fj968485    GHSA-p8f7-22gq-m7j9 (HIGH)86    aka: CVE-2022-4297587    Phoenix before 1.6.14 mishandles check_origin wildcarding88    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j98990    EEF-CVE-2026-56811 (HIGH)91    aka: CVE-2026-56811, GHSA-6983-jfq8-485w92    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service93    https://osv.dev/vulnerability/EEF-CVE-2026-5681194  phoenix_token_auth 0.4.095  plug 1.20.396  plug_crypto 2.2.097  poison 1.4.098  poolboy 1.5.299  postgrex 0.11.2100  property_table 0.3.4101  ranch 1.8.1102  ring_logger 0.11.7103  secure_random 0.1.1104  ssl_verify_fun 1.1.7105  tablet 0.3.3106  telemetry 1.4.2107  timex 0.19.5108  toolshed 0.5.0109  tzdata 0.5.22110  uboot_env 1.0.2111  unicode_util_compat 0.7.1112Found packages with security advisories, see above for details113All dependencies have been fetched114    error: undefined variable "deps"115    │116 10 │      deps: deps,117    │            ^^^^118    │119    └─ /work/proj/deps/postgrex/mix.exs:10:12: Postgrex.Mixfile.project/0120121    error: undefined variable "description"122    │123 14 │      description: description,124    │                   ^^^^^^^^^^^125    │126    └─ /work/proj/deps/postgrex/mix.exs:14:19: Postgrex.Mixfile.project/0127128    error: undefined variable "package"129    │130 15 │      package: package]131    │               ^^^^^^^132    │133    └─ /work/proj/deps/postgrex/mix.exs:15:15: Postgrex.Mixfile.project/0134135Error while loading project :postgrex at /work/proj/deps/postgrex136** (CompileError) deps/postgrex/mix.exs: cannot compile module Postgrex.Mixfile (errors have been logged)137