host

1Resolving Hex dependencies...2Resolution completed in 0.176s3Unchanged:4  certifi 1.2.15  circular_buffer 1.1.06  connection 1.0.47  db_connection 1.1.38  decimal 1.9.0 VULNERABLE!9    EEF-CVE-2026-32686 (MEDIUM)10    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v11    Unbounded exponent in decimal enables unauthenticated DoS12    https://osv.dev/vulnerability/EEF-CVE-2026-3268613  deferred_config 0.1.114  ecto 2.2.1215  elixir_make 0.10.016  fn_expr 0.3.017  git_cli 0.3.018  hackney 1.8.6 VULNERABLE!19    EEF-CVE-2026-47075 (MEDIUM)20    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf21    CR/LF injection in query parameter in hackney22    https://osv.dev/vulnerability/EEF-CVE-2026-470752324    EEF-CVE-2026-47071 (HIGH)25    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr26    SOCKS5 TLS upgrade ignores caller timeout in hackney27    https://osv.dev/vulnerability/EEF-CVE-2026-470712829    EEF-CVE-2026-47076 (MEDIUM)30    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq31    SSRF allowlist bypass via percent-encoded host in hackney32    https://osv.dev/vulnerability/EEF-CVE-2026-470763334    EEF-CVE-2026-47069 (LOW)35    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw236    CRLF injection in cookie domain/path options in hackney37    https://osv.dev/vulnerability/EEF-CVE-2026-470693839    GHSA-9fm9-hp7p-53mf (LOW)40    aka: CVE-2025-386441    Hackney fails to properly release HTTP connections to the pool42    https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf4344    GHSA-vq52-99r9-h5pw (LOW)45    aka: CVE-2025-121146    Server-side Request Forgery (SSRF) in hackney47    https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw48  httpoison 0.11.249  idna 5.0.250  interactive_cmd 0.1.451  jason 1.4.552  metrics 1.0.153  mimerl 1.0.254  nerves 2.0.0-pre.255  nerves_discovery 0.1.556  nerves_logging 0.2.457  nerves_runtime 0.13.1358  nerves_system_bbb 2.30.259  nerves_system_br 1.34.460  nerves_system_mangopi_mq_pro 0.17.261  nerves_system_qemu_aarch64 0.4.262  nerves_system_rpi0 2.1.263  nerves_system_rpi4 2.1.264  nerves_system_rpi5 2.1.265  nerves_system_trellis 0.5.066  nerves_system_x86_64 1.34.267  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.168  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.169  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.170  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.171  nerves_toolchain_x86_64_nerves_linux_musl 15.3.172  nerves_uevent 0.1.773  poison 3.1.074  poolboy 1.5.275  postgrex 0.13.576  property_table 0.3.477  ring_logger 0.11.778  ssl_verify_fun 1.1.179  stripe_callbacks 0.6.180  stripe_post 0.5.181  tablet 0.3.382  toolshed 0.5.083  uboot_env 1.0.284  unicode_util_compat 0.2.085  version_tasks 0.12.086Found packages with security advisories, see above for details87All dependencies have been fetched88    warning: String.strip/1 is deprecated. Use String.trim/1 instead89    │90  4 │   @version File.read!("VERSION") |> String.strip91    │                                            ~92    │93    └─ /work/proj/deps/poison/mix.exs:4:44: Poison.Mixfile (module)9495==> version_tasks96Compiling 22 files (.ex)97Generated version_tasks app98==> fn_expr99Compiling 3 files (.ex)100Generated fn_expr app101==> jason102Compiling 10 files (.ex)103Generated jason app104==> nerves_compatibility_test105===> Analyzing applications...106===> Compiling unicode_util_compat107===> Analyzing applications...108===> Compiling idna109make: Entering directory '/work/proj/deps/certifi/certs_spec'110escript ../certs_spec/gen_certifi_mod.escript111=ERROR REPORT==== 4-Oct-2026::12:23:04.921752 ===112Can't load module 'compile' that resides in sticky dir113114escript: Internal error: {badmatch,{error,sticky_directory}}115[{escript,parse_and_run,3,[{file,"escript.erl"},{line,466}]},116 {escript,start,1,[{file,"escript.erl"},{line,422}]},117 {init,start_it,1,[]},118 {init,start_em,1,[]},119 {init,do_boot,3,[]}]120make: *** [Makefile:4: generate] Error 127121make: Leaving directory '/work/proj/deps/certifi/certs_spec'122===> Hook for compile failed!123124** (Mix) Could not compile dependency :certifi, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/host/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile certifi --force", update it with "mix deps.update certifi" or clean it with "mix deps.clean certifi"