Build log
nerves_system_x86_64
user_manager 0.2.0 · fail · run user_manager-0.2.0-1791149632765
225 of 225 lines
1Resolving Hex dependencies...2Resolution completed in 0.199s3Unchanged:4 certifi 1.0.05 cipher 1.4.06 circular_buffer 1.1.07 comeonin 3.2.08 connection 1.0.49 db_connection 1.1.310 decimal 1.9.0 VULNERABLE!11 EEF-CVE-2026-32686 (MEDIUM)12 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v13 Unbounded exponent in decimal enables unauthenticated DoS14 https://osv.dev/vulnerability/EEF-CVE-2026-3268615 ecto 2.2.1216 elixir_make 0.10.017 elixir_uuid 1.2.118 exprintf 0.2.119 exprof 0.2.420 facebook 0.9.021 faker 0.19.022 flow 0.15.023 gen_stage 0.14.324 guardian 0.14.6 VULNERABLE!25 EEF-CVE-2026-54894 (MEDIUM)26 aka: CVE-2026-54894, GHSA-xqch-c77q-rgh527 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys28 https://osv.dev/vulnerability/EEF-CVE-2026-5489429 guardian_db 0.8.030 hackney 1.6.6 RETIRED! VULNERABLE!31 (invalid)3233 EEF-CVE-2026-47075 (MEDIUM)34 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf35 CR/LF injection in query parameter in hackney36 https://osv.dev/vulnerability/EEF-CVE-2026-470753738 GHSA-vq52-99r9-h5pw (LOW)39 aka: CVE-2025-121140 Server-side Request Forgery (SSRF) in hackney41 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw4243 EEF-CVE-2026-47071 (HIGH)44 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr45 SOCKS5 TLS upgrade ignores caller timeout in hackney46 https://osv.dev/vulnerability/EEF-CVE-2026-470714748 GHSA-9fm9-hp7p-53mf (LOW)49 aka: CVE-2025-386450 Hackney fails to properly release HTTP connections to the pool51 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf5253 EEF-CVE-2026-47069 (LOW)54 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw255 CRLF injection in cookie domain/path options in hackney56 https://osv.dev/vulnerability/EEF-CVE-2026-470695758 EEF-CVE-2026-47076 (MEDIUM)59 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq60 SSRF allowlist bypass via percent-encoded host in hackney61 https://osv.dev/vulnerability/EEF-CVE-2026-4707662 httpoison 0.10.063 idna 4.0.064 interactive_cmd 0.1.465 jose 1.11.1266 json 1.4.167 libex_config 0.2.068 makeup 1.2.169 makeup_elixir 1.0.170 metrics 1.0.171 mime 2.0.772 mimerl 1.0.273 nerves 2.0.0-pre.274 nerves_discovery 0.1.575 nerves_logging 0.2.476 nerves_runtime 0.13.1377 nerves_system_bbb 2.30.278 nerves_system_br 1.34.479 nerves_system_mangopi_mq_pro 0.17.280 nerves_system_qemu_aarch64 0.4.281 nerves_system_rpi0 2.1.282 nerves_system_rpi4 2.1.283 nerves_system_rpi5 2.1.284 nerves_system_trellis 0.5.085 nerves_system_x86_64 1.34.286 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.187 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.188 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.189 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.190 nerves_toolchain_x86_64_nerves_linux_musl 15.3.191 nerves_uevent 0.1.792 nimble_parsec 1.4.293 plug 1.20.394 plug_crypto 2.2.095 poison 3.1.096 poolboy 1.5.297 postgrex 0.13.598 property_table 0.3.499 ring_logger 0.11.7100 ssl_verify_fun 1.1.1101 tablet 0.3.3102 telemetry 1.4.2103 toolshed 0.5.0104 uboot_env 1.0.2105 user_manager 0.2.0106* Getting user_manager (Hex package)107* Getting nerves (Hex package)108* Getting ring_logger (Hex package)109* Getting toolshed (Hex package)110* Getting nerves_runtime (Hex package)111* Getting nerves_system_bbb (Hex package)112* Getting nerves_system_mangopi_mq_pro (Hex package)113* Getting nerves_system_qemu_aarch64 (Hex package)114* Getting nerves_system_rpi0 (Hex package)115* Getting nerves_system_rpi4 (Hex package)116* Getting nerves_system_rpi5 (Hex package)117* Getting nerves_system_trellis (Hex package)118* Getting nerves_system_x86_64 (Hex package)119* Getting nerves_system_br (Hex package)120* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)121* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)122* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)123* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)124* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)125* Getting nerves_logging (Hex package)126* Getting nerves_uevent (Hex package)127* Getting uboot_env (Hex package)128* Getting elixir_make (Hex package)129* Getting property_table (Hex package)130* Getting circular_buffer (Hex package)131* Getting interactive_cmd (Hex package)132* Getting nerves_discovery (Hex package)133* Getting tablet (Hex package)134* Getting cipher (Hex package)135* Getting comeonin (Hex package)136* Getting ecto (Hex package)137* Getting exprof (Hex package)138* Getting facebook (Hex package)139* Getting faker (Hex package)140* Getting flow (Hex package)141* Getting gen_stage (Hex package)142* Getting guardian (Hex package)143* Getting guardian_db (Hex package)144* Getting httpoison (Hex package)145* Getting postgrex (Hex package)146* Getting connection (Hex package)147* Getting db_connection (Hex package)148* Getting decimal (Hex package)149* Getting hackney (Hex package)150* Getting certifi (Hex package)151* Getting idna (Hex package)152* Getting metrics (Hex package)153* Getting mimerl (Hex package)154* Getting ssl_verify_fun (Hex package)155* Getting elixir_uuid (Hex package)156* Getting jose (Hex package)157* Getting plug (Hex package)158* Getting poison (Hex package)159* Getting mime (Hex package)160* Getting plug_crypto (Hex package)161* Getting telemetry (Hex package)162* Getting makeup (Hex package)163* Getting makeup_elixir (Hex package)164* Getting nimble_parsec (Hex package)165* Getting json (Hex package)166* Getting libex_config (Hex package)167* Getting exprintf (Hex package)168* Getting poolboy (Hex package)169Found retired packages, see above for details170Found packages with security advisories, see above for details171 warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes172 │173 14 │ preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test, "coveralls.html": :test],174 │ ~175 │176 └─ /work/proj/deps_x86_64/user_manager/mix.exs:14:26177178 warning: found quoted keyword "test" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes179 │180 49 │ "test": ["ecto.drop --quiet","ecto.create --quiet", "ecto.migrate", "run priv/repo/seeds.exs", "test"]181 │ ~182 │183 └─ /work/proj/deps_x86_64/user_manager/mix.exs:49:6184185 warning: String.strip/1 is deprecated. Use String.trim/1 instead186 │187 4 │ @version File.read!("VERSION") |> String.strip188 │ ~189 │190 └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)191192 warning: using single-quoted strings to represent charlists is deprecated.193 Use ~c"" if you indeed want a charlist or use "" instead.194 You may run "mix format --migrate" to change all single-quoted195 strings to use the ~c sigil and fix this warning.196 │197 29 │ :os.cmd('git rev-parse --short HEAD') |> to_string |> String.trim_trailing("\n")198 │ ~199 │200 └─ /work/proj/deps_x86_64/cipher/mix.exs:29:13201202 error: undefined variable "description"203 │204 11 │ description: description,205 │ ^^^^^^^^^^^206 │207 └─ /work/proj/deps_x86_64/facebook/mix.exs:11:20: Facebook.Mixfile.project/0208209 error: undefined variable "package"210 │211 12 │ package: package,212 │ ^^^^^^^213 │214 └─ /work/proj/deps_x86_64/facebook/mix.exs:12:16: Facebook.Mixfile.project/0215216 error: undefined variable "deps"217 │218 13 │ deps: deps,219 │ ^^^^220 │221 └─ /work/proj/deps_x86_64/facebook/mix.exs:13:13: Facebook.Mixfile.project/0222223Error while loading project :facebook at /work/proj/deps_x86_64/facebook224** (CompileError) deps_x86_64/facebook/mix.exs: cannot compile module Facebook.Mixfile (errors have been logged)225