nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.256s3Unchanged:4  bamboo 0.8.05  certifi 2.15.06  circular_buffer 1.1.07  comeonin 2.6.08  connection 1.0.49  cowboy 1.1.2 VULNERABLE!10    GHSA-w4f7-4cxr-rv3c (MEDIUM)11    aka: CVE-2026-43966, EEF-CVE-2026-4396612    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability13    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c14  cowlib 1.0.2 VULNERABLE!15    EEF-CVE-2026-7790 (HIGH)16    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6517    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS18    https://osv.dev/vulnerability/EEF-CVE-2026-77901920    EEF-CVE-2026-43970 (HIGH)21    aka: CVE-2026-43970, GHSA-84f2-rp86-235p22    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame23    https://osv.dev/vulnerability/EEF-CVE-2026-4397024  db_connection 1.1.325  decimal 1.9.0 VULNERABLE!26    EEF-CVE-2026-32686 (MEDIUM)27    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v28    Unbounded exponent in decimal enables unauthenticated DoS29    https://osv.dev/vulnerability/EEF-CVE-2026-3268630  ecto 2.2.1231  elixir_make 0.10.032  elixir_uuid 1.2.133  guardian 0.14.6 VULNERABLE!34    EEF-CVE-2026-54894 (MEDIUM)35    aka: CVE-2026-54894, GHSA-xqch-c77q-rgh536    Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys37    https://osv.dev/vulnerability/EEF-CVE-2026-5489438  hackney 1.25.0 VULNERABLE!39    EEF-CVE-2026-47071 (HIGH)40    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr41    SOCKS5 TLS upgrade ignores caller timeout in hackney42    https://osv.dev/vulnerability/EEF-CVE-2026-470714344    EEF-CVE-2026-47076 (MEDIUM)45    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq46    SSRF allowlist bypass via percent-encoded host in hackney47    https://osv.dev/vulnerability/EEF-CVE-2026-470764849    EEF-CVE-2026-47069 (LOW)50    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw251    CRLF injection in cookie domain/path options in hackney52    https://osv.dev/vulnerability/EEF-CVE-2026-470695354    EEF-CVE-2026-47075 (MEDIUM)55    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf56    CR/LF injection in query parameter in hackney57    https://osv.dev/vulnerability/EEF-CVE-2026-4707558  idna 6.1.159  interactive_cmd 0.1.460  jose 1.11.1261  metrics 1.0.162  mime 2.0.763  mimerl 1.5.064  nerves 2.0.0-pre.265  nerves_discovery 0.1.566  nerves_logging 0.2.467  nerves_runtime 0.13.1368  nerves_system_bbb 2.30.269  nerves_system_br 1.34.470  nerves_system_mangopi_mq_pro 0.17.271  nerves_system_qemu_aarch64 0.4.272  nerves_system_rpi0 2.1.273  nerves_system_rpi4 2.1.274  nerves_system_rpi5 2.1.275  nerves_system_trellis 0.5.076  nerves_system_x86_64 1.34.277  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.178  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.179  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.180  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.181  nerves_toolchain_x86_64_nerves_linux_musl 15.3.182  nerves_uevent 0.1.783  parse_trans 3.4.184  phoenix 1.3.5 VULNERABLE!85    GHSA-p8f7-22gq-m7j9 (HIGH)86    aka: CVE-2022-4297587    Phoenix before 1.6.14 mishandles check_origin wildcarding88    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j98990    EEF-CVE-2026-56812 (MEDIUM)91    aka: CVE-2026-56812, GHSA-63mc-hw7g-86rr92    Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff93    https://osv.dev/vulnerability/EEF-CVE-2026-568129495    EEF-CVE-2026-56811 (HIGH)96    aka: CVE-2026-56811, GHSA-6983-jfq8-485w97    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service98    https://osv.dev/vulnerability/EEF-CVE-2026-5681199  phoenix_ecto 3.6.0100  phoenix_html 2.14.3 VULNERABLE!101    GHSA-5g2h-9x5v-5h3x (MEDIUM)102    aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q2103    phoenix_html allows Cross-site Scripting in HEEx class attributes104    https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x105  phoenix_pubsub 1.1.2106  plug 1.20.3107  plug_crypto 2.2.0108  poison 3.1.0109  poolboy 1.5.2110  postgrex 0.13.5111  property_table 0.3.4112  ranch 1.3.2113  ring_logger 0.11.7114  secure_random 0.5.1115  sentinel 2.0.1 RETIRED!116    (deprecated) This library is no longer maintained or advised117  ssl_verify_fun 1.1.7118  tablet 0.3.3119  telemetry 1.4.2120  toolshed 0.5.0121  uboot_env 1.0.2122  ueberauth 0.10.8123  ueberauth_identity 0.4.2124  unicode_util_compat 0.7.1125* Getting sentinel (Hex package)126* Getting nerves (Hex package)127* Getting ring_logger (Hex package)128* Getting toolshed (Hex package)129* Getting nerves_runtime (Hex package)130* Getting nerves_system_bbb (Hex package)131* Getting nerves_system_mangopi_mq_pro (Hex package)132* Getting nerves_system_qemu_aarch64 (Hex package)133* Getting nerves_system_rpi0 (Hex package)134* Getting nerves_system_rpi4 (Hex package)135* Getting nerves_system_rpi5 (Hex package)136* Getting nerves_system_trellis (Hex package)137* Getting nerves_system_x86_64 (Hex package)138* Getting nerves_system_br (Hex package)139* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)140* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)141* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)142* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)143* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)144* Getting nerves_logging (Hex package)145* Getting nerves_uevent (Hex package)146* Getting uboot_env (Hex package)147* Getting elixir_make (Hex package)148* Getting property_table (Hex package)149* Getting circular_buffer (Hex package)150* Getting interactive_cmd (Hex package)151* Getting nerves_discovery (Hex package)152* Getting tablet (Hex package)153* Getting bamboo (Hex package)154* Getting comeonin (Hex package)155* Getting cowboy (Hex package)156* Getting ecto (Hex package)157* Getting guardian (Hex package)158* Getting jose (Hex package)159* Getting phoenix (Hex package)160* Getting phoenix_ecto (Hex package)161* Getting phoenix_html (Hex package)162* Getting postgrex (Hex package)163* Getting secure_random (Hex package)164* Getting ueberauth (Hex package)165* Getting ueberauth_identity (Hex package)166* Getting plug (Hex package)167* Getting mime (Hex package)168* Getting plug_crypto (Hex package)169* Getting telemetry (Hex package)170* Getting connection (Hex package)171* Getting db_connection (Hex package)172* Getting decimal (Hex package)173* Getting phoenix_pubsub (Hex package)174* Getting poison (Hex package)175* Getting elixir_uuid (Hex package)176* Getting poolboy (Hex package)177* Getting cowlib (Hex package)178* Getting ranch (Hex package)179* Getting hackney (Hex package)180* Getting certifi (Hex package)181* Getting idna (Hex package)182* Getting metrics (Hex package)183* Getting mimerl (Hex package)184* Getting parse_trans (Hex package)185* Getting ssl_verify_fun (Hex package)186* Getting unicode_util_compat (Hex package)187Found retired packages, see above for details188Found packages with security advisories, see above for details189    warning: String.strip/1 is deprecated. Use String.trim/1 instead190    │191  4 │   @version File.read!("VERSION") |> String.strip192    │                                            ~193    │194    └─ /work/proj/deps_trellis/poison/mix.exs:4:44: Poison.Mixfile (module)195196    warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes197    │198 14 │      preferred_cli_env: ["coveralls": :test, "coveralls.circle": :test],199    │                          ~200    │201    └─ /work/proj/deps_trellis/bamboo/mix.exs:14:26202203    warning: found quoted keyword "test" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes204    │205 87 │       "test": ["ecto.drop", "ecto.create --quiet", "ecto.migrate", "test"]206    │       ~207    │208    └─ /work/proj/deps_trellis/sentinel/mix.exs:87:7209210    error: undefined variable "package"211    │212 13 │       package: package,213    │                ^^^^^^^214    │215    └─ /work/proj/deps_trellis/sentinel/mix.exs:13:16: Sentinel.Mixfile.project/0216217    error: undefined variable "description"218    │219 14 │       description: description,220    │                    ^^^^^^^^^^^221    │222    └─ /work/proj/deps_trellis/sentinel/mix.exs:14:20: Sentinel.Mixfile.project/0223224    error: undefined variable "aliases"225    │226 16 │       aliases: aliases,227    │                ^^^^^^^228    │229    └─ /work/proj/deps_trellis/sentinel/mix.exs:16:16: Sentinel.Mixfile.project/0230231    error: undefined variable "deps"232    │233 17 │       deps: deps]234    │             ^^^^235    │236    └─ /work/proj/deps_trellis/sentinel/mix.exs:17:13: Sentinel.Mixfile.project/0237238Error while loading project :sentinel at /work/proj/deps_trellis/sentinel239** (CompileError) deps_trellis/sentinel/mix.exs: cannot compile module Sentinel.Mixfile (errors have been logged)240