Build log
host
phubme 0.5.4 · fail · run phubme-0.5.4-1791064626256
134 of 134 lines
1Resolving Hex dependencies...2Resolution completed in 0.165s3Unchanged:4 certifi 1.0.05 circular_buffer 1.1.06 cowboy 1.0.4 VULNERABLE!7 GHSA-w4f7-4cxr-rv3c (MEDIUM)8 aka: CVE-2026-43966, EEF-CVE-2026-439669 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability10 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c11 cowlib 1.0.2 VULNERABLE!12 EEF-CVE-2026-7790 (HIGH)13 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6514 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS15 https://osv.dev/vulnerability/EEF-CVE-2026-77901617 EEF-CVE-2026-43970 (HIGH)18 aka: CVE-2026-43970, GHSA-84f2-rp86-235p19 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame20 https://osv.dev/vulnerability/EEF-CVE-2026-4397021 earmark 1.4.49 RETIRED! VULNERABLE!22 (deprecated) Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).2324 EEF-CVE-2026-48591 (MEDIUM)25 aka: CVE-2026-48591, GHSA-52mm-h59v-f3c726 Stored XSS via unescaped HTML attribute values in earmark27 https://osv.dev/vulnerability/EEF-CVE-2026-4859128 earmark_parser 1.4.4629 elixir_make 0.10.030 ex_doc 0.40.431 exjsx 3.2.132 hackney 1.6.6 RETIRED! VULNERABLE!33 (invalid)3435 EEF-CVE-2026-47075 (MEDIUM)36 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf37 CR/LF injection in query parameter in hackney38 https://osv.dev/vulnerability/EEF-CVE-2026-470753940 GHSA-vq52-99r9-h5pw (LOW)41 aka: CVE-2025-121142 Server-side Request Forgery (SSRF) in hackney43 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw4445 EEF-CVE-2026-47071 (HIGH)46 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr47 SOCKS5 TLS upgrade ignores caller timeout in hackney48 https://osv.dev/vulnerability/EEF-CVE-2026-470714950 GHSA-9fm9-hp7p-53mf (LOW)51 aka: CVE-2025-386452 Hackney fails to properly release HTTP connections to the pool53 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf5455 EEF-CVE-2026-47069 (LOW)56 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw257 CRLF injection in cookie domain/path options in hackney58 https://osv.dev/vulnerability/EEF-CVE-2026-470695960 EEF-CVE-2026-47076 (MEDIUM)61 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq62 SSRF allowlist bypass via percent-encoded host in hackney63 https://osv.dev/vulnerability/EEF-CVE-2026-4707664 httpoison 0.9.265 idna 4.0.066 interactive_cmd 0.1.467 jsx 2.8.368 makeup 1.2.369 makeup_elixir 1.0.170 makeup_erlang 1.1.071 metrics 1.0.172 mime 2.0.773 mimerl 1.0.274 nerves 2.0.0-pre.275 nerves_discovery 0.1.576 nerves_logging 0.2.477 nerves_runtime 0.13.1378 nerves_system_bbb 2.30.279 nerves_system_br 1.34.480 nerves_system_mangopi_mq_pro 0.17.281 nerves_system_qemu_aarch64 0.4.282 nerves_system_rpi0 2.1.283 nerves_system_rpi4 2.1.284 nerves_system_rpi5 2.1.285 nerves_system_trellis 0.5.086 nerves_system_x86_64 1.34.287 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.188 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.189 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.190 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.191 nerves_toolchain_x86_64_nerves_linux_musl 15.3.192 nerves_uevent 0.1.793 nimble_parsec 1.4.294 phubme 0.5.495 plug 1.20.396 plug_crypto 2.2.097 poison 1.5.298 property_table 0.3.499 ranch 1.8.1100 ring_logger 0.11.7101 slack 0.9.3102 ssl_verify_fun 1.1.1103 tablet 0.3.3104 telemetry 1.4.2105 toolshed 0.5.0106 uboot_env 1.0.2107 websocket_client 1.1.0108Found retired packages, see above for details109Found packages with security advisories, see above for details110All dependencies have been fetched111 warning: String.strip/1 is deprecated. Use String.trim/1 instead112 │113 4 │ @version File.read!("VERSION") |> String.strip114 │ ~115 │116 └─ /work/proj/deps/poison/mix.exs:4:44: Poison.Mixfile (module)117118 error: undefined variable "deps"119 │120 11 │ deps: deps,121 │ ^^^^122 │123 └─ /work/proj/deps/poison/mix.exs:11:12: Poison.Mixfile.project/0124125 error: undefined variable "package"126 │127 12 │ package: package,128 │ ^^^^^^^129 │130 └─ /work/proj/deps/poison/mix.exs:12:15: Poison.Mixfile.project/0131132Error while loading project :poison at /work/proj/deps/poison133** (CompileError) deps/poison/mix.exs: cannot compile module Poison.Mixfile (errors have been logged)134