Build log
host
playwright_assets 1.49.1 · fail · run playwright_assets-1.49.1-1791069692748
104 of 104 lines
1Resolving Hex dependencies...2Resolution completed in 0.204s3Unchanged:4 circular_buffer 1.1.05 cowboy 2.6.3 VULNERABLE!6 EEF-CVE-2026-8466 (HIGH)7 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x88 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy9 https://osv.dev/vulnerability/EEF-CVE-2026-84661011 EEF-CVE-2026-65624 (MEDIUM)12 aka: CVE-2026-6562413 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion14 https://osv.dev/vulnerability/EEF-CVE-2026-656241516 GHSA-w4f7-4cxr-rv3c (MEDIUM)17 aka: CVE-2026-43966, EEF-CVE-2026-4396618 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability19 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c20 cowlib 2.7.3 VULNERABLE!21 EEF-CVE-2026-59248 (HIGH)22 aka: CVE-2026-5924823 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS24 https://osv.dev/vulnerability/EEF-CVE-2026-592482526 EEF-CVE-2026-43970 (HIGH)27 aka: CVE-2026-43970, GHSA-84f2-rp86-235p28 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame29 https://osv.dev/vulnerability/EEF-CVE-2026-439703031 EEF-CVE-2026-43968 (MEDIUM)32 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r33 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/134 https://osv.dev/vulnerability/EEF-CVE-2026-439683536 EEF-CVE-2026-7790 (HIGH)37 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6538 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS39 https://osv.dev/vulnerability/EEF-CVE-2026-779040 elixir_make 0.10.041 interactive_cmd 0.1.442 mime 2.0.743 nerves 2.0.0-pre.244 nerves_discovery 0.1.545 nerves_logging 0.2.446 nerves_runtime 0.13.1347 nerves_system_bbb 2.30.248 nerves_system_br 1.34.449 nerves_system_mangopi_mq_pro 0.17.250 nerves_system_qemu_aarch64 0.4.251 nerves_system_rpi0 2.1.252 nerves_system_rpi4 2.1.253 nerves_system_rpi5 2.1.254 nerves_system_trellis 0.5.055 nerves_system_x86_64 1.34.256 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160 nerves_toolchain_x86_64_nerves_linux_musl 15.3.161 nerves_uevent 0.1.762 playwright_assets 1.49.163 plug 1.20.364 plug_cowboy 2.1.3 VULNERABLE!65 EEF-CVE-2026-32688 (HIGH)66 aka: CVE-2026-32688, GHSA-q8x4-x7mp-5vg267 Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy68 https://osv.dev/vulnerability/EEF-CVE-2026-3268869 plug_crypto 2.2.070 property_table 0.3.471 ranch 1.7.172 ring_logger 0.11.773 tablet 0.3.374 telemetry 1.4.275 toolshed 0.5.076 uboot_env 1.0.277Found packages with security advisories, see above for details78All dependencies have been fetched79===> Analyzing applications...80===> Compiling ranch81 ┌─ src/ranch_ssl.erl:82 │83 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of84 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead858687 ┌─ src/ranch_conns_sup.erl:88 │89 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},90 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.91Compile directive 'nowarn_deprecated_catch' can be used to suppress92warnings in selected modules.939495===> Analyzing applications...96===> Compiling cowlib97===> Compiling src/cow_sse.erl failed98 ┌─ src/cow_sse.erl:99 │100 56 │ -> {event, parsed_event(), State} | {more, State}.101 │ ╰── type variable 'State' is only used once (is unbound)102103104** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/host/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"