nerves_system_mangopi_mq_pro

1Resolving Hex dependencies...2Resolution completed in 0.567s3Unchanged:4  circular_buffer 1.1.05  cowlib 2.20.0 VULNERABLE!6    EEF-CVE-2026-43971 (MEDIUM)7    aka: CVE-2026-439718    Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/19    https://osv.dev/vulnerability/EEF-CVE-2026-439711011    EEF-CVE-2026-43966 (MEDIUM)12    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c13    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/214    https://osv.dev/vulnerability/EEF-CVE-2026-439661516    EEF-CVE-2026-43969 (LOW)17    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5618    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/119    https://osv.dev/vulnerability/EEF-CVE-2026-4396920  elixir_make 0.10.021  gun 2.2.0 VULNERABLE!22    EEF-CVE-2026-43973 (HIGH)23    aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7724    gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion25    https://osv.dev/vulnerability/EEF-CVE-2026-439732627    EEF-CVE-2026-43972 (MEDIUM)28    aka: CVE-2026-43972, GHSA-36w4-95hv-5vwg29    gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection30    https://osv.dev/vulnerability/EEF-CVE-2026-439723132    EEF-CVE-2026-43974 (HIGH)33    aka: CVE-2026-43974, GHSA-2j82-37xg-f9wp34    gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM35    https://osv.dev/vulnerability/EEF-CVE-2026-439743637    GHSA-w4f7-4cxr-rv3c (MEDIUM)38    aka: CVE-2026-43966, EEF-CVE-2026-4396639    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability40    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c41  interactive_cmd 0.1.442  jason 1.4.543  nerves 1.15.044  nerves_discovery 0.1.545  nerves_logging 0.2.446  nerves_runtime 0.13.1347  nerves_system_bbb 2.30.248  nerves_system_br 1.34.449  nerves_system_mangopi_mq_pro 0.17.250  nerves_system_qemu_aarch64 0.4.251  nerves_system_rpi 2.1.252  nerves_system_rpi0 2.1.253  nerves_system_rpi0_2 2.1.254  nerves_system_rpi2 2.1.255  nerves_system_rpi3 2.1.256  nerves_system_rpi4 2.1.257  nerves_system_rpi5 2.1.258  nerves_system_x86_64 1.34.259  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.160  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.161  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.162  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.163  nerves_toolchain_x86_64_nerves_linux_musl 15.3.164  nerves_uevent 0.1.765  opentelemetry_api 1.5.066  property_table 0.3.467  quickrand 2.0.768  ring_logger 0.11.769  shoehorn 0.9.370  tablet 0.3.371  telemetry 1.4.272  temporal_sdk 0.2.2073  toolshed 0.5.074  uboot_env 1.0.275  uuid_erl 2.0.776* Getting temporal_sdk (Hex package)77* Getting nerves (Hex package)78* Getting shoehorn (Hex package)79* Getting ring_logger (Hex package)80* Getting toolshed (Hex package)81* Getting nerves_runtime (Hex package)82* Getting nerves_system_bbb (Hex package)83* Getting nerves_system_mangopi_mq_pro (Hex package)84* Getting nerves_system_qemu_aarch64 (Hex package)85* Getting nerves_system_rpi (Hex package)86* Getting nerves_system_rpi0 (Hex package)87* Getting nerves_system_rpi0_2 (Hex package)88* Getting nerves_system_rpi2 (Hex package)89* Getting nerves_system_rpi3 (Hex package)90* Getting nerves_system_rpi4 (Hex package)91* Getting nerves_system_rpi5 (Hex package)92* Getting nerves_system_x86_64 (Hex package)93* Getting nerves_system_br (Hex package)94* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)95* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)96* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)97* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)98* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)99* Getting nerves_logging (Hex package)100* Getting nerves_uevent (Hex package)101* Getting uboot_env (Hex package)102* Getting elixir_make (Hex package)103* Getting property_table (Hex package)104* Getting circular_buffer (Hex package)105* Getting interactive_cmd (Hex package)106* Getting jason (Hex package)107* Getting nerves_discovery (Hex package)108* Getting tablet (Hex package)109* Getting gun (Hex package)110* Getting opentelemetry_api (Hex package)111* Getting telemetry (Hex package)112* Getting uuid (Hex package)113* Getting quickrand (Hex package)114* Getting cowlib (Hex package)115Found packages with security advisories, see above for details116You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more117==> jason118Compiling 10 files (.ex)119Generated jason app120==> tablet121Compiling 2 files (.ex)122Generated tablet app123==> elixir_make124Compiling 8 files (.ex)125Generated elixir_make app126==> nerves_discovery127Compiling 5 files (.ex)128Generated nerves_discovery app129==> interactive_cmd130Compiling 1 file (.ex)131Generated interactive_cmd app132==> nerves133HOST_CC port.o134HOST_LD port135Compiling 55 files (.ex)136Generated nerves app137==> nerves_compatibility_test138139Nerves environment140  MIX_TARGET:   mangopi_mq_pro141  MIX_ENV:      prod142143Checking for prebuilt Nerves artifacts...144  Found nerves_system_mangopi_mq_pro in cache145    /home/nerves/.nerves/artifacts/nerves_system_mangopi_mq_pro-portable-0.17.2146  Found nerves_toolchain_riscv64_nerves_linux_gnu in cache147    /home/nerves/.nerves/artifacts/nerves_toolchain_riscv64_nerves_linux_gnu-linux_x86_64-15.3.1148==> jason149Compiling 10 files (.ex)150Compiling lib/decoder.ex (it's taking more than 10s)151Generated jason app152==> tablet153Compiling 2 files (.ex)154Generated tablet app155==> elixir_make156Compiling 8 files (.ex)157Generated elixir_make app158==> nerves_discovery159Compiling 5 files (.ex)160Generated nerves_discovery app161==> interactive_cmd162Compiling 1 file (.ex)163Generated interactive_cmd app164==> nerves165HOST_CC port.o166HOST_LD port167Compiling 55 files (.ex)168Generated nerves app169==> nerves_system_br170Generated nerves_system_br app171==> nerves_toolchain_riscv64_nerves_linux_gnu172Compiling 1 file (.ex)173Generated nerves_toolchain_riscv64_nerves_linux_gnu app174==> nerves_system_mangopi_mq_pro175Generated nerves_system_mangopi_mq_pro app176==> nerves_compatibility_test177178Nerves environment179  MIX_TARGET:   mangopi_mq_pro180  MIX_ENV:      prod181182==> circular_buffer183Compiling 1 file (.ex)184Generated circular_buffer app185==> nerves_logging186 CC kmsg_tailer.o187 LD kmsg_tailer188Compiling 5 files (.ex)189Generated nerves_logging app190==> nerves_compatibility_test191===> Analyzing applications...192===> Compiling cowlib193===> Analyzing applications...194===> Compiling gun195===> Analyzing applications...196===> Compiling quickrand197==> ring_logger198Compiling 7 files (.ex)199Generated ring_logger app200==> shoehorn201Compiling 8 files (.ex)202Generated shoehorn app203==> nerves_compatibility_test204===> Analyzing applications...205===> Compiling telemetry206==> uboot_env207Compiling 5 files (.ex)208Generated uboot_env app209==> property_table210Compiling 8 files (.ex)211Generated property_table app212==> nerves_uevent213 CC uevent.o214 LD uevent215Compiling 5 files (.ex)216Generated nerves_uevent app217==> nerves_runtime218Compiling 14 files (.ex)219Generated nerves_runtime app220==> toolshed221Compiling 5 files (.ex)222Generated toolshed app223==> nerves_compatibility_test224===> Analyzing applications...225===> Compiling uuid226==> opentelemetry_api227Compiling 19 files (.erl)228Compiling 5 files (.ex)229Generated opentelemetry_api app230==> temporal_sdk231Compiling 113 files (.erl)232Killed