Build log
nerves_system_rpi0
phoenix_token_auth 0.4.0 · fail · run phoenix_token_auth-0.4.0-1791064428816
195 of 195 lines
1Resolving Hex dependencies...2Resolution completed in 0.219s3Unchanged:4 certifi 2.15.05 circular_buffer 1.1.06 combine 0.10.07 comeonin 2.0.38 connection 1.0.49 cowboy 1.0.4 VULNERABLE!10 GHSA-w4f7-4cxr-rv3c (MEDIUM)11 aka: CVE-2026-43966, EEF-CVE-2026-4396612 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability13 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c14 cowlib 1.0.2 VULNERABLE!15 EEF-CVE-2026-7790 (HIGH)16 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6517 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS18 https://osv.dev/vulnerability/EEF-CVE-2026-77901920 EEF-CVE-2026-43970 (HIGH)21 aka: CVE-2026-43970, GHSA-84f2-rp86-235p22 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame23 https://osv.dev/vulnerability/EEF-CVE-2026-4397024 db_connection 1.1.325 decimal 1.9.0 VULNERABLE!26 EEF-CVE-2026-32686 (MEDIUM)27 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v28 Unbounded exponent in decimal enables unauthenticated DoS29 https://osv.dev/vulnerability/EEF-CVE-2026-3268630 ecto 1.1.931 elixir_make 0.10.032 hackney 1.25.0 VULNERABLE!33 EEF-CVE-2026-47071 (HIGH)34 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr35 SOCKS5 TLS upgrade ignores caller timeout in hackney36 https://osv.dev/vulnerability/EEF-CVE-2026-470713738 EEF-CVE-2026-47076 (MEDIUM)39 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq40 SSRF allowlist bypass via percent-encoded host in hackney41 https://osv.dev/vulnerability/EEF-CVE-2026-470764243 EEF-CVE-2026-47069 (LOW)44 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw245 CRLF injection in cookie domain/path options in hackney46 https://osv.dev/vulnerability/EEF-CVE-2026-470694748 EEF-CVE-2026-47075 (MEDIUM)49 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf50 CR/LF injection in query parameter in hackney51 https://osv.dev/vulnerability/EEF-CVE-2026-4707552 idna 6.1.153 interactive_cmd 0.1.454 joken 0.13.155 mailgun 0.1.256 metrics 1.0.157 mime 2.0.758 mimerl 1.5.059 nerves 2.0.0-pre.260 nerves_discovery 0.1.561 nerves_logging 0.2.462 nerves_runtime 0.13.1363 nerves_system_bbb 2.30.264 nerves_system_br 1.34.465 nerves_system_mangopi_mq_pro 0.17.266 nerves_system_qemu_aarch64 0.4.267 nerves_system_rpi0 2.1.268 nerves_system_rpi4 2.1.269 nerves_system_rpi5 2.1.270 nerves_system_trellis 0.5.071 nerves_system_x86_64 1.34.272 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.173 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.174 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.175 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.176 nerves_toolchain_x86_64_nerves_linux_musl 15.3.177 nerves_uevent 0.1.778 parse_trans 3.4.179 phoenix 1.1.2 VULNERABLE!80 GHSA-cmfh-8f8r-fj96 (MEDIUM)81 aka: CVE-2017-100016382 Phoenix Arbitrary URL Redirect83 https://osv.dev/vulnerability/GHSA-cmfh-8f8r-fj968485 GHSA-p8f7-22gq-m7j9 (HIGH)86 aka: CVE-2022-4297587 Phoenix before 1.6.14 mishandles check_origin wildcarding88 https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j98990 EEF-CVE-2026-56811 (HIGH)91 aka: CVE-2026-56811, GHSA-6983-jfq8-485w92 Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service93 https://osv.dev/vulnerability/EEF-CVE-2026-5681194 phoenix_token_auth 0.4.095 plug 1.20.396 plug_crypto 2.2.097 poison 1.4.098 poolboy 1.5.299 postgrex 0.11.2100 property_table 0.3.4101 ranch 1.8.1102 ring_logger 0.11.7103 secure_random 0.1.1104 ssl_verify_fun 1.1.7105 tablet 0.3.3106 telemetry 1.4.2107 timex 0.19.5108 toolshed 0.5.0109 tzdata 0.5.22110 uboot_env 1.0.2111 unicode_util_compat 0.7.1112* Getting phoenix_token_auth (Hex package)113* Getting nerves (Hex package)114* Getting ring_logger (Hex package)115* Getting toolshed (Hex package)116* Getting nerves_runtime (Hex package)117* Getting nerves_system_bbb (Hex package)118* Getting nerves_system_mangopi_mq_pro (Hex package)119* Getting nerves_system_qemu_aarch64 (Hex package)120* Getting nerves_system_rpi0 (Hex package)121* Getting nerves_system_rpi4 (Hex package)122* Getting nerves_system_rpi5 (Hex package)123* Getting nerves_system_trellis (Hex package)124* Getting nerves_system_x86_64 (Hex package)125* Getting nerves_system_br (Hex package)126* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)127* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)128* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)129* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)130* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)131* Getting nerves_logging (Hex package)132* Getting nerves_uevent (Hex package)133* Getting uboot_env (Hex package)134* Getting elixir_make (Hex package)135* Getting property_table (Hex package)136* Getting circular_buffer (Hex package)137* Getting interactive_cmd (Hex package)138* Getting nerves_discovery (Hex package)139* Getting tablet (Hex package)140* Getting comeonin (Hex package)141* Getting cowboy (Hex package)142* Getting ecto (Hex package)143* Getting joken (Hex package)144* Getting mailgun (Hex package)145* Getting phoenix (Hex package)146* Getting poison (Hex package)147* Getting postgrex (Hex package)148* Getting secure_random (Hex package)149* Getting timex (Hex package)150* Getting combine (Hex package)151* Getting tzdata (Hex package)152* Getting hackney (Hex package)153* Getting certifi (Hex package)154* Getting idna (Hex package)155* Getting metrics (Hex package)156* Getting mimerl (Hex package)157* Getting parse_trans (Hex package)158* Getting ssl_verify_fun (Hex package)159* Getting unicode_util_compat (Hex package)160* Getting connection (Hex package)161* Getting db_connection (Hex package)162* Getting decimal (Hex package)163* Getting plug (Hex package)164* Getting mime (Hex package)165* Getting plug_crypto (Hex package)166* Getting telemetry (Hex package)167* Getting poolboy (Hex package)168* Getting cowlib (Hex package)169* Getting ranch (Hex package)170Found packages with security advisories, see above for details171You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more172 error: undefined variable "deps"173 │174 10 │ deps: deps,175 │ ^^^^176 │177 └─ /work/proj/deps_rpi0/postgrex/mix.exs:10:12: Postgrex.Mixfile.project/0178179 error: undefined variable "description"180 │181 14 │ description: description,182 │ ^^^^^^^^^^^183 │184 └─ /work/proj/deps_rpi0/postgrex/mix.exs:14:19: Postgrex.Mixfile.project/0185186 error: undefined variable "package"187 │188 15 │ package: package]189 │ ^^^^^^^190 │191 └─ /work/proj/deps_rpi0/postgrex/mix.exs:15:15: Postgrex.Mixfile.project/0192193Error while loading project :postgrex at /work/proj/deps_rpi0/postgrex194** (CompileError) deps_rpi0/postgrex/mix.exs: cannot compile module Postgrex.Mixfile (errors have been logged)195