nerves_system_rpi5

1Resolving Hex dependencies...2Resolution completed in 0.1s3Unchanged:4  circular_buffer 1.1.05  cowboy 2.6.3 VULNERABLE!6    EEF-CVE-2026-8466 (HIGH)7    aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x88    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy9    https://osv.dev/vulnerability/EEF-CVE-2026-84661011    EEF-CVE-2026-65624 (MEDIUM)12    aka: CVE-2026-6562413    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion14    https://osv.dev/vulnerability/EEF-CVE-2026-656241516    GHSA-w4f7-4cxr-rv3c (MEDIUM)17    aka: CVE-2026-43966, EEF-CVE-2026-4396618    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability19    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c20  cowlib 2.7.3 VULNERABLE!21    EEF-CVE-2026-59248 (HIGH)22    aka: CVE-2026-5924823    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS24    https://osv.dev/vulnerability/EEF-CVE-2026-592482526    EEF-CVE-2026-43970 (HIGH)27    aka: CVE-2026-43970, GHSA-84f2-rp86-235p28    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame29    https://osv.dev/vulnerability/EEF-CVE-2026-439703031    EEF-CVE-2026-43968 (MEDIUM)32    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r33    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/134    https://osv.dev/vulnerability/EEF-CVE-2026-439683536    EEF-CVE-2026-7790 (HIGH)37    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6538    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS39    https://osv.dev/vulnerability/EEF-CVE-2026-779040  elixir_make 0.10.041  interactive_cmd 0.1.442  mime 2.0.743  nerves 2.0.0-pre.244  nerves_discovery 0.1.545  nerves_logging 0.2.446  nerves_runtime 0.13.1347  nerves_system_bbb 2.30.248  nerves_system_br 1.34.449  nerves_system_mangopi_mq_pro 0.17.250  nerves_system_qemu_aarch64 0.4.251  nerves_system_rpi0 2.1.252  nerves_system_rpi4 2.1.253  nerves_system_rpi5 2.1.254  nerves_system_trellis 0.5.055  nerves_system_x86_64 1.34.256  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160  nerves_toolchain_x86_64_nerves_linux_musl 15.3.161  nerves_uevent 0.1.762  playwright_assets 1.49.163  plug 1.20.364  plug_cowboy 2.1.3 VULNERABLE!65    EEF-CVE-2026-32688 (HIGH)66    aka: CVE-2026-32688, GHSA-q8x4-x7mp-5vg267    Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy68    https://osv.dev/vulnerability/EEF-CVE-2026-3268869  plug_crypto 2.2.070  property_table 0.3.471  ranch 1.7.172  ring_logger 0.11.773  tablet 0.3.374  telemetry 1.4.275  toolshed 0.5.076  uboot_env 1.0.277* Getting playwright_assets (Hex package)78* Getting nerves (Hex package)79* Getting ring_logger (Hex package)80* Getting toolshed (Hex package)81* Getting nerves_runtime (Hex package)82* Getting nerves_system_bbb (Hex package)83* Getting nerves_system_mangopi_mq_pro (Hex package)84* Getting nerves_system_qemu_aarch64 (Hex package)85* Getting nerves_system_rpi0 (Hex package)86* Getting nerves_system_rpi4 (Hex package)87* Getting nerves_system_rpi5 (Hex package)88* Getting nerves_system_trellis (Hex package)89* Getting nerves_system_x86_64 (Hex package)90* Getting nerves_system_br (Hex package)91* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)92* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)93* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)94* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)95* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)96* Getting nerves_logging (Hex package)97* Getting nerves_uevent (Hex package)98* Getting uboot_env (Hex package)99* Getting elixir_make (Hex package)100* Getting property_table (Hex package)101* Getting circular_buffer (Hex package)102* Getting interactive_cmd (Hex package)103* Getting nerves_discovery (Hex package)104* Getting tablet (Hex package)105* Getting cowlib (Hex package)106* Getting plug (Hex package)107* Getting plug_cowboy (Hex package)108* Getting cowboy (Hex package)109* Getting ranch (Hex package)110* Getting mime (Hex package)111* Getting plug_crypto (Hex package)112* Getting telemetry (Hex package)113Found packages with security advisories, see above for details114==> nerves_system_br115Generated nerves_system_br app116==> mime117Compiling 1 file (.ex)118Generated mime app119==> circular_buffer120Compiling 1 file (.ex)121Generated circular_buffer app122==> plug_crypto123Compiling 5 files (.ex)124Generated plug_crypto app125==> nerves_compatibility_test126===> Analyzing applications...127===> Compiling ranch128    ┌─ src/ranch_conns_sup.erl:129    │130 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},131    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.132Compile directive 'nowarn_deprecated_catch' can be used to suppress133warnings in selected modules.134135136     ┌─ src/ranch_ssl.erl:137     │138 142 │  	case ssl:ssl_accept(CSocket, Opts, Timeout) of139     │  	     ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead140141142==> tablet143Compiling 2 files (.ex)144Generated tablet app145==> elixir_make146Compiling 8 files (.ex)147Generated elixir_make app148==> nerves_logging149 CC kmsg_tailer.o150 LD kmsg_tailer151Compiling 5 files (.ex)152Generated nerves_logging app153==> nerves_compatibility_test154===> Analyzing applications...155===> Compiling cowlib156===> Compiling src/cow_sse.erl failed157    ┌─ src/cow_sse.erl:158    │159 56 │  	-> {event, parsed_event(), State} | {more, State}.160    │  	                           ╰── type variable 'State' is only used once (is unbound)161162163** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/rpi5/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"