Build log
host
prop 0.0.5 · fail · run prop-0.0.5-1791074469433
342 of 342 lines
1Resolving Hex dependencies...2Resolution completed in 0.599s3Unchanged:4 accessible 0.3.05 aws_signature 0.2.06 bamboo 2.2.07 bamboo_smtp 4.2.28 broadway 1.3.09 castore 0.1.1610 certifi 2.15.011 circular_buffer 1.1.012 combine 0.10.013 confex 3.5.114 cowboy 2.19.015 cowboy_telemetry 0.4.016 cowlib 2.20.0 VULNERABLE!17 EEF-CVE-2026-43966 (MEDIUM)18 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c19 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/220 https://osv.dev/vulnerability/EEF-CVE-2026-439662122 EEF-CVE-2026-43969 (LOW)23 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5624 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/125 https://osv.dev/vulnerability/EEF-CVE-2026-4396926 db_connection 2.10.227 decimal 2.4.1 VULNERABLE!28 EEF-CVE-2026-32686 (MEDIUM)29 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v30 Unbounded exponent in decimal enables unauthenticated DoS31 https://osv.dev/vulnerability/EEF-CVE-2026-3268632 deque 1.2.033 earmark_parser 1.4.2534 ecto 3.13.635 ecto_enum 1.4.036 ecto_sql 3.13.537 ecto_term 0.0.138 elixir_make 0.10.039 enumerati 0.0.840 ethereumex 0.7.141 etso 0.1.642 ex2ms 1.7.043 ex_abi 0.5.1244 ex_binance 0.0.1045 ex_bitmex 0.6.146 ex_bybit 0.0.147 ex_delta_exchange 0.0.348 ex_deribit 0.0.949 ex_doc 0.29.250 ex_ftx 0.0.1451 ex_gdax 0.2.052 ex_huobi 0.0.253 ex_keccak 0.6.054 ex_okex 0.6.055 exconstructor 1.3.156 exw3 0.6.157 gen_smtp 1.2.058 gen_stage 1.3.259 gettext 0.19.160 hackney 1.25.0 VULNERABLE!61 EEF-CVE-2026-47071 (HIGH)62 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr63 SOCKS5 TLS upgrade ignores caller timeout in hackney64 https://osv.dev/vulnerability/EEF-CVE-2026-470716566 EEF-CVE-2026-47076 (MEDIUM)67 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq68 SSRF allowlist bypass via percent-encoded host in hackney69 https://osv.dev/vulnerability/EEF-CVE-2026-470767071 EEF-CVE-2026-47069 (LOW)72 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw273 CRLF injection in cookie domain/path options in hackney74 https://osv.dev/vulnerability/EEF-CVE-2026-470697576 EEF-CVE-2026-47075 (MEDIUM)77 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf78 CR/LF injection in query parameter in hackney79 https://osv.dev/vulnerability/EEF-CVE-2026-4707580 history 0.0.2381 httpoison 1.8.282 idna 6.1.183 indifferent 0.9.184 interactive_cmd 0.1.485 jason 1.3.086 juice 0.0.387 libcluster 3.5.088 livebook 0.6.3 VULNERABLE!89 EEF-CVE-2026-66298 (HIGH)90 aka: CVE-2026-66298, GHSA-68c2-prqg-x62g91 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts92 https://osv.dev/vulnerability/EEF-CVE-2026-6629893 makeup 1.2.394 makeup_elixir 0.16.295 makeup_erlang 0.1.596 mapail 1.0.297 maptu 1.0.098 master_proxy 0.1.4 RETIRED!99 (deprecated) Development has moved to main_proxy100 metrics 1.0.1101 mime 1.6.0102 mimerl 1.5.0103 murmur 1.0.4104 navigator 0.0.8105 nerves 2.0.0-pre.2106 nerves_discovery 0.1.5107 nerves_logging 0.2.4108 nerves_runtime 0.13.13109 nerves_system_bbb 2.30.2110 nerves_system_br 1.34.4111 nerves_system_mangopi_mq_pro 0.17.2112 nerves_system_qemu_aarch64 0.4.2113 nerves_system_rpi0 2.1.2114 nerves_system_rpi4 2.1.2115 nerves_system_rpi5 2.1.2116 nerves_system_trellis 0.5.0117 nerves_system_x86_64 1.34.2118 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1119 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1120 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1121 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1122 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1123 nerves_uevent 0.1.7124 nimble_options 1.1.1125 nimble_parsec 1.4.2126 notified 0.0.6127 notified_phoenix 0.0.7128 number 1.0.5129 ordered_nary_tree 0.0.4130 paged_query 0.0.2131 parse_trans 3.4.1132 phoenix 1.6.6 VULNERABLE!133 GHSA-p8f7-22gq-m7j9 (HIGH)134 aka: CVE-2022-42975135 Phoenix before 1.6.14 mishandles check_origin wildcarding136 https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j9137138 EEF-CVE-2026-56812 (MEDIUM)139 aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr140 Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff141 https://osv.dev/vulnerability/EEF-CVE-2026-56812142143 EEF-CVE-2026-56811 (HIGH)144 aka: CVE-2026-56811, GHSA-6983-jfq8-485w145 Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service146 https://osv.dev/vulnerability/EEF-CVE-2026-56811147 phoenix_ecto 4.7.0148 phoenix_html 3.2.0149 phoenix_live_dashboard 0.6.5150 phoenix_live_react 0.4.2151 phoenix_live_view 0.17.9 VULNERABLE!152 EEF-CVE-2026-64941 (LOW)153 aka: CVE-2026-64941, GHSA-36m4-rm57-3prf154 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR155 https://osv.dev/vulnerability/EEF-CVE-2026-64941156 phoenix_pubsub 2.3.0157 phoenix_view 1.1.2158 plug 1.20.3159 plug_cowboy 2.5.2 VULNERABLE!160 EEF-CVE-2026-32688 (HIGH)161 aka: CVE-2026-32688, GHSA-q8x4-x7mp-5vg2162 Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy163 https://osv.dev/vulnerability/EEF-CVE-2026-32688164 plug_crypto 1.2.5165 poison 4.0.1166 polymorphic_embed 1.10.0167 poolboy 1.5.2168 postgrex 0.22.4169 prop 0.0.5170 proper_case 1.3.1171 property_table 0.3.4172 ranch 2.3.0173 redirect 0.4.0174 ring_logger 0.11.7175 rube 0.0.4176 rustler 0.38.0177 schoolbus 0.0.3178 slurp 0.0.12179 slurpee 0.0.18180 ssl_verify_fun 1.1.7181 stored 0.0.8182 stylish 0.0.9183 table_rex 3.2.0184 tablet 0.3.3185 tai 0.0.75186 tai_events 0.0.2187 telemetry 1.4.2188 telemetry_metrics 0.6.1189 telemetry_metrics_prometheus 1.1.0190 telemetry_metrics_prometheus_core 1.2.1191 telemetry_poller 1.0.0192 timex 3.7.9193 toolshed 0.5.0194 tzdata 1.2.2195 uboot_env 1.0.2196 unicode_util_compat 0.7.1197 vex 0.9.2198 websockex 0.4.3199 workbench 0.0.18200Found retired packages, see above for details201Found packages with security advisories, see above for details202All dependencies have been fetched203warning: found quoted keyword "aws_signature" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes204└─ nofile:2:3205206warning: found quoted keyword "bypass" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes207└─ nofile:3:3208209warning: found quoted keyword "castore" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes210└─ nofile:4:3211212warning: found quoted keyword "cowboy" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes213└─ nofile:5:3214215warning: found quoted keyword "cowboy_telemetry" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes216└─ nofile:6:3217218warning: found quoted keyword "cowlib" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes219└─ nofile:7:3220221warning: found quoted keyword "earmark_parser" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes222└─ nofile:8:3223224warning: found quoted keyword "file_system" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes225└─ nofile:9:3226227warning: found quoted keyword "floki" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes228└─ nofile:10:3229230warning: found quoted keyword "html_entities" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes231└─ nofile:11:3232233warning: found quoted keyword "jason" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes234└─ nofile:12:3235236warning: found quoted keyword "mime" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes237└─ nofile:13:3238239warning: found quoted keyword "phoenix" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes240└─ nofile:14:3241242warning: found quoted keyword "phoenix_html" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes243└─ nofile:15:3244245warning: found quoted keyword "phoenix_live_dashboard" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes246└─ nofile:16:3247248warning: found quoted keyword "phoenix_live_reload" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes249└─ nofile:17:3250251warning: found quoted keyword "phoenix_live_view" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes252└─ nofile:18:3253254warning: found quoted keyword "phoenix_pubsub" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes255└─ nofile:19:3256257warning: found quoted keyword "phoenix_view" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes258└─ nofile:20:3259260warning: found quoted keyword "plug" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes261└─ nofile:21:3262263warning: found quoted keyword "plug_cowboy" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes264└─ nofile:22:3265266warning: found quoted keyword "plug_crypto" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes267└─ nofile:23:3268269warning: found quoted keyword "ranch" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes270└─ nofile:24:3271272warning: found quoted keyword "telemetry" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes273└─ nofile:25:3274275warning: found quoted keyword "telemetry_metrics" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes276└─ nofile:26:3277278warning: found quoted keyword "telemetry_poller" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes279└─ nofile:27:3280281 warning: using single-quoted strings to represent charlists is deprecated.282 Use ~c"" if you indeed want a charlist or use "" instead.283 You may run "mix format --migrate" to change all single-quoted284 strings to use the ~c sigil and fix this warning.285 │286 21 │ defp elixirc_paths(:test), do: ['lib', 'test/support']287 │ ~288 │289 └─ /work/proj/deps/websockex/mix.exs:21:35290291 warning: using single-quoted strings to represent charlists is deprecated.292 Use ~c"" if you indeed want a charlist or use "" instead.293 You may run "mix format --migrate" to change all single-quoted294 strings to use the ~c sigil and fix this warning.295 │296 21 │ defp elixirc_paths(:test), do: ['lib', 'test/support']297 │ ~298 │299 └─ /work/proj/deps/websockex/mix.exs:21:42300301 warning: using single-quoted strings to represent charlists is deprecated.302 Use ~c"" if you indeed want a charlist or use "" instead.303 You may run "mix format --migrate" to change all single-quoted304 strings to use the ~c sigil and fix this warning.305 │306 22 │ defp elixirc_paths(_), do: ['lib']307 │ ~308 │309 └─ /work/proj/deps/websockex/mix.exs:22:31310311==> earmark_parser312warning: in order to compile .yrl files, you must add "compilers: [:yecc] ++ Mix.compilers()" to the "def project" section of earmark_parser's mix.exs313Compiling 1 file (.yrl)314warning: in order to compile .xrl files, you must add "compilers: [:leex] ++ Mix.compilers()" to the "def project" section of earmark_parser's mix.exs315Compiling 2 files (.xrl)316Compiling 3 files (.erl)317Compiling 47 files (.ex)318warning: ~R/.../ is deprecated, use ~r/.../ instead319 lib/earmark_parser/line_scanner.ex:85: EarmarkParser.LineScanner._type_of/3320321 warning: Tuple.append/2 is deprecated. Use insert_at instead322 │323 60 │ tag_tpl |> Tuple.append(Enum.reverse(lines)) |> Tuple.append(@verbatim)324 │ ~325 │326 └─ lib/earmark_parser/helpers/html_parser.ex:60:22: EarmarkParser.Helpers.HtmlParser._parse_rest/3327 └─ lib/earmark_parser/helpers/html_parser.ex:60:59: EarmarkParser.Helpers.HtmlParser._parse_rest/3328 └─ lib/earmark_parser/helpers/html_parser.ex:64:39: EarmarkParser.Helpers.HtmlParser._parse_rest/3329 └─ lib/earmark_parser/helpers/html_parser.ex:64:88: EarmarkParser.Helpers.HtmlParser._parse_rest/3330 └─ lib/earmark_parser/helpers/html_parser.ex:65:39: EarmarkParser.Helpers.HtmlParser._parse_rest/3331 └─ lib/earmark_parser/helpers/html_parser.ex:65:76: EarmarkParser.Helpers.HtmlParser._parse_rest/3332 └─ lib/earmark_parser/helpers/html_parser.ex:66:40: EarmarkParser.Helpers.HtmlParser._parse_rest/3333 └─ lib/earmark_parser/helpers/html_parser.ex:66:77: EarmarkParser.Helpers.HtmlParser._parse_rest/3334335Generated earmark_parser app336==> schoolbus337Compiling 2 files (.ex)338Generated schoolbus app339==> websockex340could not compile dependency :websockex, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile websockex --force", update it with "mix deps.update websockex" or clean it with "mix deps.clean websockex"341==> nerves_compatibility_test342** (Mix) :elixirc_paths should be a list of string paths, got: [~c"lib"]