nerves_system_qemu_aarch64

1Resolving Hex dependencies...2Resolution completed in 0.174s3Unchanged:4  circular_buffer 1.1.05  cowboy 2.7.0 VULNERABLE!6    EEF-CVE-2026-65624 (MEDIUM)7    aka: CVE-2026-656248    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion9    https://osv.dev/vulnerability/EEF-CVE-2026-656241011    EEF-CVE-2026-8466 (HIGH)12    aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x813    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy14    https://osv.dev/vulnerability/EEF-CVE-2026-84661516    GHSA-w4f7-4cxr-rv3c (MEDIUM)17    aka: CVE-2026-43966, EEF-CVE-2026-4396618    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability19    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c20  cowlib 2.8.0 VULNERABLE!21    EEF-CVE-2026-7790 (HIGH)22    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6523    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS24    https://osv.dev/vulnerability/EEF-CVE-2026-77902526    EEF-CVE-2026-43968 (MEDIUM)27    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r28    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/129    https://osv.dev/vulnerability/EEF-CVE-2026-439683031    EEF-CVE-2026-59248 (HIGH)32    aka: CVE-2026-5924833    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS34    https://osv.dev/vulnerability/EEF-CVE-2026-592483536    EEF-CVE-2026-43970 (HIGH)37    aka: CVE-2026-43970, GHSA-84f2-rp86-235p38    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame39    https://osv.dev/vulnerability/EEF-CVE-2026-4397040  elixir_make 0.10.041  grpc 0.5.0-beta.1 VULNERABLE!42    EEF-CVE-2026-53430 (HIGH)43    aka: CVE-2026-53430, GHSA-6ccx-9c9f-327w44    grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/145    https://osv.dev/vulnerability/EEF-CVE-2026-534304647    EEF-CVE-2026-48853 (CRITICAL)48    aka: CVE-2026-48853, GHSA-grp7-v8xh-rj7h49    Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc50    https://osv.dev/vulnerability/EEF-CVE-2026-488535152    EEF-CVE-2026-48854 (HIGH)53    aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj54    Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc55    https://osv.dev/vulnerability/EEF-CVE-2026-4885456  grpc_gun 2.0.057  interactive_cmd 0.1.458  mime 2.0.759  nerves 2.0.0-pre.260  nerves_discovery 0.1.561  nerves_logging 0.2.462  nerves_runtime 0.13.1363  nerves_system_bbb 2.30.264  nerves_system_br 1.34.465  nerves_system_mangopi_mq_pro 0.17.266  nerves_system_qemu_aarch64 0.4.267  nerves_system_rpi0 2.1.268  nerves_system_rpi4 2.1.269  nerves_system_rpi5 2.1.270  nerves_system_trellis 0.5.071  nerves_system_x86_64 1.34.272  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.173  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.174  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.175  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.176  nerves_toolchain_x86_64_nerves_linux_musl 15.3.177  nerves_uevent 0.1.778  optimal 0.3.779  plug 1.20.380  plug_crypto 2.2.081  property_table 0.3.482  protobuf 0.17.083  ranch 1.7.184  ring_logger 0.11.785  spandex 3.2.086  spandex_otlp 0.1.0-rc.287  tablet 0.3.388  telemetry 0.4.389  toolshed 0.5.090  uboot_env 1.0.291* Getting spandex_otlp (Hex package)92* Getting nerves (Hex package)93* Getting ring_logger (Hex package)94* Getting toolshed (Hex package)95* Getting nerves_runtime (Hex package)96* Getting nerves_system_bbb (Hex package)97* Getting nerves_system_mangopi_mq_pro (Hex package)98* Getting nerves_system_qemu_aarch64 (Hex package)99* Getting nerves_system_rpi0 (Hex package)100* Getting nerves_system_rpi4 (Hex package)101* Getting nerves_system_rpi5 (Hex package)102* Getting nerves_system_trellis (Hex package)103* Getting nerves_system_x86_64 (Hex package)104* Getting nerves_system_br (Hex package)105* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)106* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)107* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)108* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)109* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)110* Getting nerves_logging (Hex package)111* Getting nerves_uevent (Hex package)112* Getting uboot_env (Hex package)113* Getting elixir_make (Hex package)114* Getting property_table (Hex package)115* Getting circular_buffer (Hex package)116* Getting interactive_cmd (Hex package)117* Getting nerves_discovery (Hex package)118* Getting tablet (Hex package)119* Getting grpc (Hex package)120* Getting spandex (Hex package)121* Getting telemetry (Hex package)122* Getting optimal (Hex package)123* Getting plug (Hex package)124* Getting mime (Hex package)125* Getting plug_crypto (Hex package)126* Getting cowboy (Hex package)127* Getting gun (Hex package)128* Getting protobuf (Hex package)129* Getting cowlib (Hex package)130* Getting ranch (Hex package)131Found packages with security advisories, see above for details132You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more133==> nerves_system_br134Generated nerves_system_br app135==> mime136Compiling 1 file (.ex)137Generated mime app138==> circular_buffer139Compiling 1 file (.ex)140Generated circular_buffer app141==> plug_crypto142Compiling 5 files (.ex)143Generated plug_crypto app144==> nerves_compatibility_test145===> Analyzing applications...146===> Compiling ranch147    ┌─ src/ranch_conns_sup.erl:148    │149 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},150    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.151Compile directive 'nowarn_deprecated_catch' can be used to suppress152warnings in selected modules.153154155     ┌─ src/ranch_ssl.erl:156     │157 142 │  	case ssl:ssl_accept(CSocket, Opts, Timeout) of158     │  	     ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead159160161==> tablet162Compiling 2 files (.ex)163Generated tablet app164==> protobuf165Compiling 50 files (.ex)166Generated protobuf app167==> elixir_make168Compiling 8 files (.ex)169Generated elixir_make app170==> nerves_logging171 CC kmsg_tailer.o172 LD kmsg_tailer173Compiling 5 files (.ex)174Generated nerves_logging app175==> nerves_compatibility_test176===> Analyzing applications...177===> Compiling cowlib178===> Compiling src/cow_sse.erl failed179    ┌─ src/cow_sse.erl:180    │181 56 │  	-> {event, parsed_event(), State} | {more, State}.182    │  	                           ╰── type variable 'State' is only used once (is unbound)183184185** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/qemu_aarch64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"