Build log
host
user_manager 0.2.0 · fail · run user_manager-0.2.0-1791149632765
163 of 163 lines
1Resolving Hex dependencies...2Resolution completed in 0.334s3Unchanged:4 certifi 1.0.05 cipher 1.4.06 circular_buffer 1.1.07 comeonin 3.2.08 connection 1.0.49 db_connection 1.1.310 decimal 1.9.0 VULNERABLE!11 EEF-CVE-2026-32686 (MEDIUM)12 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v13 Unbounded exponent in decimal enables unauthenticated DoS14 https://osv.dev/vulnerability/EEF-CVE-2026-3268615 ecto 2.2.1216 elixir_make 0.10.017 elixir_uuid 1.2.118 exprintf 0.2.119 exprof 0.2.420 facebook 0.9.021 faker 0.19.022 flow 0.15.023 gen_stage 0.14.324 guardian 0.14.6 VULNERABLE!25 EEF-CVE-2026-54894 (MEDIUM)26 aka: CVE-2026-54894, GHSA-xqch-c77q-rgh527 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys28 https://osv.dev/vulnerability/EEF-CVE-2026-5489429 guardian_db 0.8.030 hackney 1.6.6 RETIRED! VULNERABLE!31 (invalid)3233 EEF-CVE-2026-47075 (MEDIUM)34 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf35 CR/LF injection in query parameter in hackney36 https://osv.dev/vulnerability/EEF-CVE-2026-470753738 GHSA-vq52-99r9-h5pw (LOW)39 aka: CVE-2025-121140 Server-side Request Forgery (SSRF) in hackney41 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw4243 EEF-CVE-2026-47071 (HIGH)44 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr45 SOCKS5 TLS upgrade ignores caller timeout in hackney46 https://osv.dev/vulnerability/EEF-CVE-2026-470714748 GHSA-9fm9-hp7p-53mf (LOW)49 aka: CVE-2025-386450 Hackney fails to properly release HTTP connections to the pool51 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf5253 EEF-CVE-2026-47069 (LOW)54 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw255 CRLF injection in cookie domain/path options in hackney56 https://osv.dev/vulnerability/EEF-CVE-2026-470695758 EEF-CVE-2026-47076 (MEDIUM)59 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq60 SSRF allowlist bypass via percent-encoded host in hackney61 https://osv.dev/vulnerability/EEF-CVE-2026-4707662 httpoison 0.10.063 idna 4.0.064 interactive_cmd 0.1.465 jose 1.11.1266 json 1.4.167 libex_config 0.2.068 makeup 1.2.169 makeup_elixir 1.0.170 metrics 1.0.171 mime 2.0.772 mimerl 1.0.273 nerves 2.0.0-pre.274 nerves_discovery 0.1.575 nerves_logging 0.2.476 nerves_runtime 0.13.1377 nerves_system_bbb 2.30.278 nerves_system_br 1.34.479 nerves_system_mangopi_mq_pro 0.17.280 nerves_system_qemu_aarch64 0.4.281 nerves_system_rpi0 2.1.282 nerves_system_rpi4 2.1.283 nerves_system_rpi5 2.1.284 nerves_system_trellis 0.5.085 nerves_system_x86_64 1.34.286 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.187 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.188 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.189 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.190 nerves_toolchain_x86_64_nerves_linux_musl 15.3.191 nerves_uevent 0.1.792 nimble_parsec 1.4.293 plug 1.20.394 plug_crypto 2.2.095 poison 3.1.096 poolboy 1.5.297 postgrex 0.13.598 property_table 0.3.499 ring_logger 0.11.7100 ssl_verify_fun 1.1.1101 tablet 0.3.3102 telemetry 1.4.2103 toolshed 0.5.0104 uboot_env 1.0.2105 user_manager 0.2.0106Found retired packages, see above for details107Found packages with security advisories, see above for details108All dependencies have been fetched109 warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes110 │111 14 │ preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test, "coveralls.html": :test],112 │ ~113 │114 └─ /work/proj/deps/user_manager/mix.exs:14:26115116 warning: found quoted keyword "test" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes117 │118 49 │ "test": ["ecto.drop --quiet","ecto.create --quiet", "ecto.migrate", "run priv/repo/seeds.exs", "test"]119 │ ~120 │121 └─ /work/proj/deps/user_manager/mix.exs:49:6122123 warning: String.strip/1 is deprecated. Use String.trim/1 instead124 │125 4 │ @version File.read!("VERSION") |> String.strip126 │ ~127 │128 └─ /work/proj/deps/poison/mix.exs:4:44: Poison.Mixfile (module)129130 warning: using single-quoted strings to represent charlists is deprecated.131 Use ~c"" if you indeed want a charlist or use "" instead.132 You may run "mix format --migrate" to change all single-quoted133 strings to use the ~c sigil and fix this warning.134 │135 29 │ :os.cmd('git rev-parse --short HEAD') |> to_string |> String.trim_trailing("\n")136 │ ~137 │138 └─ /work/proj/deps/cipher/mix.exs:29:13139140 error: undefined variable "description"141 │142 11 │ description: description,143 │ ^^^^^^^^^^^144 │145 └─ /work/proj/deps/facebook/mix.exs:11:20: Facebook.Mixfile.project/0146147 error: undefined variable "package"148 │149 12 │ package: package,150 │ ^^^^^^^151 │152 └─ /work/proj/deps/facebook/mix.exs:12:16: Facebook.Mixfile.project/0153154 error: undefined variable "deps"155 │156 13 │ deps: deps,157 │ ^^^^158 │159 └─ /work/proj/deps/facebook/mix.exs:13:13: Facebook.Mixfile.project/0160161Error while loading project :facebook at /work/proj/deps/facebook162** (CompileError) deps/facebook/mix.exs: cannot compile module Facebook.Mixfile (errors have been logged)163