Build log
nerves_system_x86_64
phoenix_token_auth 0.4.0 · fail · run phoenix_token_auth-0.4.0-1791064428816
196 of 196 lines
1Error opening ETS file /work/proj/.hex/x86_64/cache.ets: :badfile2Resolving Hex dependencies...3Resolution completed in 0.175s4Unchanged:5 certifi 2.15.06 circular_buffer 1.1.07 combine 0.10.08 comeonin 2.0.39 connection 1.0.410 cowboy 1.0.4 VULNERABLE!11 GHSA-w4f7-4cxr-rv3c (MEDIUM)12 aka: CVE-2026-43966, EEF-CVE-2026-4396613 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability14 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c15 cowlib 1.0.2 VULNERABLE!16 EEF-CVE-2026-7790 (HIGH)17 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6518 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS19 https://osv.dev/vulnerability/EEF-CVE-2026-77902021 EEF-CVE-2026-43970 (HIGH)22 aka: CVE-2026-43970, GHSA-84f2-rp86-235p23 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame24 https://osv.dev/vulnerability/EEF-CVE-2026-4397025 db_connection 1.1.326 decimal 1.9.0 VULNERABLE!27 EEF-CVE-2026-32686 (MEDIUM)28 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v29 Unbounded exponent in decimal enables unauthenticated DoS30 https://osv.dev/vulnerability/EEF-CVE-2026-3268631 ecto 1.1.932 elixir_make 0.10.033 hackney 1.25.0 VULNERABLE!34 EEF-CVE-2026-47071 (HIGH)35 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr36 SOCKS5 TLS upgrade ignores caller timeout in hackney37 https://osv.dev/vulnerability/EEF-CVE-2026-470713839 EEF-CVE-2026-47076 (MEDIUM)40 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq41 SSRF allowlist bypass via percent-encoded host in hackney42 https://osv.dev/vulnerability/EEF-CVE-2026-470764344 EEF-CVE-2026-47069 (LOW)45 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw246 CRLF injection in cookie domain/path options in hackney47 https://osv.dev/vulnerability/EEF-CVE-2026-470694849 EEF-CVE-2026-47075 (MEDIUM)50 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf51 CR/LF injection in query parameter in hackney52 https://osv.dev/vulnerability/EEF-CVE-2026-4707553 idna 6.1.154 interactive_cmd 0.1.455 joken 0.13.156 mailgun 0.1.257 metrics 1.0.158 mime 2.0.759 mimerl 1.5.060 nerves 2.0.0-pre.261 nerves_discovery 0.1.562 nerves_logging 0.2.463 nerves_runtime 0.13.1364 nerves_system_bbb 2.30.265 nerves_system_br 1.34.466 nerves_system_mangopi_mq_pro 0.17.267 nerves_system_qemu_aarch64 0.4.268 nerves_system_rpi0 2.1.269 nerves_system_rpi4 2.1.270 nerves_system_rpi5 2.1.271 nerves_system_trellis 0.5.072 nerves_system_x86_64 1.34.273 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.174 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.175 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.176 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.177 nerves_toolchain_x86_64_nerves_linux_musl 15.3.178 nerves_uevent 0.1.779 parse_trans 3.4.180 phoenix 1.1.2 VULNERABLE!81 GHSA-cmfh-8f8r-fj96 (MEDIUM)82 aka: CVE-2017-100016383 Phoenix Arbitrary URL Redirect84 https://osv.dev/vulnerability/GHSA-cmfh-8f8r-fj968586 GHSA-p8f7-22gq-m7j9 (HIGH)87 aka: CVE-2022-4297588 Phoenix before 1.6.14 mishandles check_origin wildcarding89 https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j99091 EEF-CVE-2026-56811 (HIGH)92 aka: CVE-2026-56811, GHSA-6983-jfq8-485w93 Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service94 https://osv.dev/vulnerability/EEF-CVE-2026-5681195 phoenix_token_auth 0.4.096 plug 1.20.397 plug_crypto 2.2.098 poison 1.4.099 poolboy 1.5.2100 postgrex 0.11.2101 property_table 0.3.4102 ranch 1.8.1103 ring_logger 0.11.7104 secure_random 0.1.1105 ssl_verify_fun 1.1.7106 tablet 0.3.3107 telemetry 1.4.2108 timex 0.19.5109 toolshed 0.5.0110 tzdata 0.5.22111 uboot_env 1.0.2112 unicode_util_compat 0.7.1113* Getting phoenix_token_auth (Hex package)114* Getting nerves (Hex package)115* Getting ring_logger (Hex package)116* Getting toolshed (Hex package)117* Getting nerves_runtime (Hex package)118* Getting nerves_system_bbb (Hex package)119* Getting nerves_system_mangopi_mq_pro (Hex package)120* Getting nerves_system_qemu_aarch64 (Hex package)121* Getting nerves_system_rpi0 (Hex package)122* Getting nerves_system_rpi4 (Hex package)123* Getting nerves_system_rpi5 (Hex package)124* Getting nerves_system_trellis (Hex package)125* Getting nerves_system_x86_64 (Hex package)126* Getting nerves_system_br (Hex package)127* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)128* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)129* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)130* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)131* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)132* Getting nerves_logging (Hex package)133* Getting nerves_uevent (Hex package)134* Getting uboot_env (Hex package)135* Getting elixir_make (Hex package)136* Getting property_table (Hex package)137* Getting circular_buffer (Hex package)138* Getting interactive_cmd (Hex package)139* Getting nerves_discovery (Hex package)140* Getting tablet (Hex package)141* Getting comeonin (Hex package)142* Getting cowboy (Hex package)143* Getting ecto (Hex package)144* Getting joken (Hex package)145* Getting mailgun (Hex package)146* Getting phoenix (Hex package)147* Getting poison (Hex package)148* Getting postgrex (Hex package)149* Getting secure_random (Hex package)150* Getting timex (Hex package)151* Getting combine (Hex package)152* Getting tzdata (Hex package)153* Getting hackney (Hex package)154* Getting certifi (Hex package)155* Getting idna (Hex package)156* Getting metrics (Hex package)157* Getting mimerl (Hex package)158* Getting parse_trans (Hex package)159* Getting ssl_verify_fun (Hex package)160* Getting unicode_util_compat (Hex package)161* Getting connection (Hex package)162* Getting db_connection (Hex package)163* Getting decimal (Hex package)164* Getting plug (Hex package)165* Getting mime (Hex package)166* Getting plug_crypto (Hex package)167* Getting telemetry (Hex package)168* Getting poolboy (Hex package)169* Getting cowlib (Hex package)170* Getting ranch (Hex package)171Found packages with security advisories, see above for details172You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more173 error: undefined variable "deps"174 │175 10 │ deps: deps,176 │ ^^^^177 │178 └─ /work/proj/deps_x86_64/postgrex/mix.exs:10:12: Postgrex.Mixfile.project/0179180 error: undefined variable "description"181 │182 14 │ description: description,183 │ ^^^^^^^^^^^184 │185 └─ /work/proj/deps_x86_64/postgrex/mix.exs:14:19: Postgrex.Mixfile.project/0186187 error: undefined variable "package"188 │189 15 │ package: package]190 │ ^^^^^^^191 │192 └─ /work/proj/deps_x86_64/postgrex/mix.exs:15:15: Postgrex.Mixfile.project/0193194Error while loading project :postgrex at /work/proj/deps_x86_64/postgrex195** (CompileError) deps_x86_64/postgrex/mix.exs: cannot compile module Postgrex.Mixfile (errors have been logged)196