phubme

Build log

host

phubme 0.5.4 · fail · run phubme-0.5.4-1791064626256
134 of 134 lines
1Resolving Hex dependencies...2Resolution completed in 0.165s3Unchanged:4  certifi 1.0.05  circular_buffer 1.1.06  cowboy 1.0.4 VULNERABLE!7    GHSA-w4f7-4cxr-rv3c (MEDIUM)8    aka: CVE-2026-43966, EEF-CVE-2026-439669    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability10    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c11  cowlib 1.0.2 VULNERABLE!12    EEF-CVE-2026-7790 (HIGH)13    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6514    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS15    https://osv.dev/vulnerability/EEF-CVE-2026-77901617    EEF-CVE-2026-43970 (HIGH)18    aka: CVE-2026-43970, GHSA-84f2-rp86-235p19    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame20    https://osv.dev/vulnerability/EEF-CVE-2026-4397021  earmark 1.4.49 RETIRED! VULNERABLE!22    (deprecated) Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).2324    EEF-CVE-2026-48591 (MEDIUM)25    aka: CVE-2026-48591, GHSA-52mm-h59v-f3c726    Stored XSS via unescaped HTML attribute values in earmark27    https://osv.dev/vulnerability/EEF-CVE-2026-4859128  earmark_parser 1.4.4629  elixir_make 0.10.030  ex_doc 0.40.431  exjsx 3.2.132  hackney 1.6.6 RETIRED! VULNERABLE!33    (invalid)3435    EEF-CVE-2026-47075 (MEDIUM)36    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf37    CR/LF injection in query parameter in hackney38    https://osv.dev/vulnerability/EEF-CVE-2026-470753940    GHSA-vq52-99r9-h5pw (LOW)41    aka: CVE-2025-121142    Server-side Request Forgery (SSRF) in hackney43    https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw4445    EEF-CVE-2026-47071 (HIGH)46    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr47    SOCKS5 TLS upgrade ignores caller timeout in hackney48    https://osv.dev/vulnerability/EEF-CVE-2026-470714950    GHSA-9fm9-hp7p-53mf (LOW)51    aka: CVE-2025-386452    Hackney fails to properly release HTTP connections to the pool53    https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf5455    EEF-CVE-2026-47069 (LOW)56    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw257    CRLF injection in cookie domain/path options in hackney58    https://osv.dev/vulnerability/EEF-CVE-2026-470695960    EEF-CVE-2026-47076 (MEDIUM)61    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq62    SSRF allowlist bypass via percent-encoded host in hackney63    https://osv.dev/vulnerability/EEF-CVE-2026-4707664  httpoison 0.9.265  idna 4.0.066  interactive_cmd 0.1.467  jsx 2.8.368  makeup 1.2.369  makeup_elixir 1.0.170  makeup_erlang 1.1.071  metrics 1.0.172  mime 2.0.773  mimerl 1.0.274  nerves 2.0.0-pre.275  nerves_discovery 0.1.576  nerves_logging 0.2.477  nerves_runtime 0.13.1378  nerves_system_bbb 2.30.279  nerves_system_br 1.34.480  nerves_system_mangopi_mq_pro 0.17.281  nerves_system_qemu_aarch64 0.4.282  nerves_system_rpi0 2.1.283  nerves_system_rpi4 2.1.284  nerves_system_rpi5 2.1.285  nerves_system_trellis 0.5.086  nerves_system_x86_64 1.34.287  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.188  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.189  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.190  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.191  nerves_toolchain_x86_64_nerves_linux_musl 15.3.192  nerves_uevent 0.1.793  nimble_parsec 1.4.294  phubme 0.5.495  plug 1.20.396  plug_crypto 2.2.097  poison 1.5.298  property_table 0.3.499  ranch 1.8.1100  ring_logger 0.11.7101  slack 0.9.3102  ssl_verify_fun 1.1.1103  tablet 0.3.3104  telemetry 1.4.2105  toolshed 0.5.0106  uboot_env 1.0.2107  websocket_client 1.1.0108Found retired packages, see above for details109Found packages with security advisories, see above for details110All dependencies have been fetched111    warning: String.strip/1 is deprecated. Use String.trim/1 instead112    │113  4 │   @version File.read!("VERSION") |> String.strip114    │                                            ~115    │116    └─ /work/proj/deps/poison/mix.exs:4:44: Poison.Mixfile (module)117118    error: undefined variable "deps"119    │120 11 │      deps: deps,121    │            ^^^^122    │123    └─ /work/proj/deps/poison/mix.exs:11:12: Poison.Mixfile.project/0124125    error: undefined variable "package"126    │127 12 │      package: package,128    │               ^^^^^^^129    │130    └─ /work/proj/deps/poison/mix.exs:12:15: Poison.Mixfile.project/0131132Error while loading project :poison at /work/proj/deps/poison133** (CompileError) deps/poison/mix.exs: cannot compile module Poison.Mixfile (errors have been logged)134