host

1Resolving Hex dependencies...2Resolution completed in 1.111s3Unchanged:4  abacus 2.2.05  abnf_parsec 2.1.06  boxart 0.3.37  castore 1.0.218  cc_precompiler 0.1.119  circular_buffer 1.1.010  cowboy 2.19.011  cowboy_telemetry 0.4.012  cowlib 2.20.0 VULNERABLE!13    EEF-CVE-2026-43966 (MEDIUM)14    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c15    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/216    https://osv.dev/vulnerability/EEF-CVE-2026-439661718    EEF-CVE-2026-43969 (LOW)19    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5620    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/121    https://osv.dev/vulnerability/EEF-CVE-2026-4396922  cringe 0.2.023  crontab 1.2.024  db_connection 2.10.225  decimal 3.1.126  dotenvy 1.2.127  ecto 3.14.228  ecto_sql 3.14.029  ecto_sqlite3 0.25.030  elixir_make 0.10.031  ex_ast 0.12.1032  ex_gram 0.67.033  exqlite 0.42.034  file_system 1.1.135  finch 0.22.036  floki 0.38.437  fsmx 0.5.038  fuse 2.5.039  ghostty 0.4.940  glob_ex 0.1.1241  hex_solver 0.3.042  hpax 1.1.043  iconify 0.3.144  idna 7.1.045  interactive_cmd 0.1.446  jason 1.4.547  jido 2.3.348  jido_action 2.3.049  jido_ai 2.3.050  jido_signal 2.3.151  json_codec 0.3.152  json_spec 1.2.053  jsv 0.26.054  libgraph 0.16.055  llm_db 2026.9.856  lua 0.4.057  luerl 1.5.158  mdex 0.14.259  mdex_native 0.2.1160  mime 2.0.761  mint 1.11.062  mint_web_socket 1.0.663  multigraph 0.16.1-mg.564  nerves 2.0.0-pre.265  nerves_discovery 0.1.566  nerves_logging 0.2.467  nerves_runtime 0.13.1368  nerves_system_bbb 2.30.269  nerves_system_br 1.34.470  nerves_system_mangopi_mq_pro 0.17.271  nerves_system_qemu_aarch64 0.4.272  nerves_system_rpi0 2.1.273  nerves_system_rpi4 2.1.274  nerves_system_rpi5 2.1.275  nerves_system_trellis 0.5.076  nerves_system_x86_64 1.34.277  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.178  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.179  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.180  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.181  nerves_toolchain_x86_64_nerves_linux_musl 15.3.182  nerves_uevent 0.1.783  nimble_options 1.1.184  nimble_ownership 1.0.285  nimble_parsec 1.4.286  nimble_pool 1.1.087  npm 0.7.688  npm_semver 0.1.089  opentelemetry 1.7.090  opentelemetry_api 1.5.091  opentelemetry_telemetry 1.1.292  oxc 0.17.893  oxide_ex 0.2.294  phoenix 1.8.1595  phoenix_html 4.3.096  phoenix_iconify 0.3.797  phoenix_live_view 1.2.1298  phoenix_pubsub 2.3.099  phoenix_streamdown 1.0.0-beta.4100  phoenix_template 1.1.0101  plug 1.20.3102  plug_cowboy 2.9.0103  plug_crypto 2.2.0104  poolboy 1.5.2105  private 0.1.2106  property_table 0.3.4107  quickbeam 0.10.20108  ranch 2.3.0109  reach 2.6.1110  req 0.5.18 VULNERABLE!111    EEF-CVE-2026-49755 (HIGH)112    aka: CVE-2026-49755, GHSA-655f-mp8p-96gv113    Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies114    https://osv.dev/vulnerability/EEF-CVE-2026-49755115116    EEF-CVE-2026-49756 (LOW)117    aka: CVE-2026-49756, GHSA-px9f-whj3-246m118    Multipart form-data header injection in Req via unescaped name/filename/content_type119    https://osv.dev/vulnerability/EEF-CVE-2026-49756120  req_llm 1.25.0121  ring_logger 0.11.7122  rustler_precompiled 0.10.0123  server_sent_events 1.1.0124  sourceror 1.12.3125  splode 0.3.2126  tablet 0.3.3127  telemetry 1.4.2128  telemetry_metrics 1.2.0129  texture 2.0.0130  time_zone_info 0.8.0131  toml 0.7.0132  toolshed 0.5.0133  ttycast 0.1.0134  uboot_env 1.0.2135  uniq 0.6.3136  vibe 0.2.4137  vize 0.13.1138  volt 0.14.6139  websock 0.5.3140  websock_adapter 0.6.0141  websockex 0.5.1142  yamerl 0.10.0143  yaml_elixir 2.12.2144  zigler_precompiled 0.1.6145  zoi 0.18.11146Found packages with security advisories, see above for details147All dependencies have been fetched148===> Analyzing applications...149===> Compiling luerl150     ┌─ src/luerl_lib.erl:151     │152 243 │  	    case catch begin [N1] = string:tokens(N0, [9,10,11,12,13,32,160]),153     │  	         ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.154Compile directive 'nowarn_deprecated_catch' can be used to suppress155warnings in selected modules.156157158../../../Users/rv/luerl/luerl/src/luerl_scan.xrl:171:10: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.159Compile directive 'nowarn_deprecated_catch' can be used to suppress160warnings in selected modules.161162     ┌─ src/luerl_lib_basic.erl:163     │164 164 │  		true when I >= 1 ->165     │  		          ╰── Warning: variable 'I' exported from '==' (line 163, column 25).166Exporting bindings from subexpressions other than block expressions is167deprecated and may yield an error in a future version of Erlang/OTP.168Please move the binding of 'I' out of the '=='.169Compile directive 'nowarn_export_var_subexpr' can be used to suppress170warnings in selected modules.171172173     ┌─ src/luerl_heap.erl:174     │175 137 │                         true when I >= 1 -> {D,array:set(I, V, A)};176     │                                   ╰── Warning: variable 'I' exported from '==' (line 136, column 39).177Exporting bindings from subexpressions other than block expressions is178deprecated and may yield an error in a future version of Erlang/OTP.179Please move the binding of 'I' out of the '=='.180Compile directive 'nowarn_export_var_subexpr' can be used to suppress181warnings in selected modules.182183     ┌─ src/luerl_heap.erl:184     │185 211 │          true when I >= 1 -> set_table_key_int(Tref, Key, I, Val, St);186     │                    ╰── Warning: variable 'I' exported from '==' (line 210, column 24).187Exporting bindings from subexpressions other than block expressions is188deprecated and may yield an error in a future version of Erlang/OTP.189Please move the binding of 'I' out of the '=='.190Compile directive 'nowarn_export_var_subexpr' can be used to suppress191warnings in selected modules.192193     ┌─ src/luerl_heap.erl:194     │195 293 │          true when I >= 1 -> get_table_key_int(Tref, Key, I, St);196     │                    ╰── Warning: variable 'I' exported from '==' (line 292, column 24).197Exporting bindings from subexpressions other than block expressions is198deprecated and may yield an error in a future version of Erlang/OTP.199Please move the binding of 'I' out of the '=='.200Compile directive 'nowarn_export_var_subexpr' can be used to suppress201warnings in selected modules.202203     ┌─ src/luerl_heap.erl:204     │205 348 │          true when I >= 1 ->206     │                    ╰── Warning: variable 'I' exported from '==' (line 347, column 24).207Exporting bindings from subexpressions other than block expressions is208deprecated and may yield an error in a future version of Erlang/OTP.209Please move the binding of 'I' out of the '=='.210Compile directive 'nowarn_export_var_subexpr' can be used to suppress211warnings in selected modules.212213     ┌─ src/luerl_heap.erl:214     │215 374 │                 true when I >= 1 ->216     │                           ╰── Warning: variable 'I' exported from '==' (line 373, column 31).217Exporting bindings from subexpressions other than block expressions is218deprecated and may yield an error in a future version of Erlang/OTP.219Please move the binding of 'I' out of the '=='.220Compile directive 'nowarn_export_var_subexpr' can be used to suppress221warnings in selected modules.222223224     ┌─ src/luerl_lib_string.erl:225     │226 483 │      case catch seq(Cs0, 0, 1, []) of227     │           ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.228Compile directive 'nowarn_deprecated_catch' can be used to suppress229warnings in selected modules.230231232==> abacus233Compiling 3 files (.erl)234Compiling 5 files (.ex)235    warning: the following clause is redundant:236237        def typeof(b) when is_boolean(b)238239    it has type:240241        dynamic(boolean())242243    previous clauses have already matched on the following types:244245        atom()246        binary()247        integer()248        float()249250    │251 31 │   def typeof(b) when is_boolean(b), do: :boolean252    │       ~253    │254    └─ lib/runtime/helpers.ex:31:7: Abacus.Runtime.Helpers.typeof/1255256    warning: Abacus.parse/1 is undefined or private257    │258 36 │       Abacus.parse(without_parantheses),259    │              ~260    │261    └─ lib/format.ex:36:14: Abacus.Format.format/1262    └─ lib/format.ex:37:14: Abacus.Format.format/1263    └─ lib/format.ex:38:14: Abacus.Format.format/1264    └─ lib/format.ex:39:14: Abacus.Format.format/1265    └─ lib/format.ex:64:14: Abacus.Format.format/1266    └─ lib/format.ex:65:14: Abacus.Format.format/1267    └─ lib/format.ex:81:14: Abacus.Format.format/1268    └─ lib/format.ex:82:14: Abacus.Format.format/1269    └─ lib/format.ex:100:28: Abacus.Format.format/1270271Generated abacus app272==> boxart273Compiling 24 files (.ex)274Generated boxart app275==> time_zone_info276Compiling 29 files (.ex)277Generated time_zone_info app278==> fsmx279Compiling 3 files (.ex)280Generated fsmx app281==> vize282Compiling 11 files (.ex)28328422:00:51.915 [debug] Downloading NIF from https://github.com/elixir-volt/vize_ex/releases/download/v0.13.1/libvize_ex_nif-v0.13.1-nif-2.15-x86_64-unknown-linux-gnu.so.tar.gz28528622:00:54.758 [debug] NIF cached at /home/nerves/.cache/rustler_precompiled/precompiled_nifs/libvize_ex_nif-v0.13.1-nif-2.15-x86_64-unknown-linux-gnu.so.tar.gz and extracted to /work/proj/_build/host/lib/vize/priv/native/libvize_ex_nif-v0.13.1-nif-2.15-x86_64-unknown-linux-gnu.so287Generated vize app288==> jido_signal289Compiling 67 files (.ex)29029122:00:57.098 [debug] Extension registry unavailable queued module=Jido.Signal.Ext.Dispatch29229322:00:57.705 [debug] Extension registry unavailable queued module=Jido.Signal.Ext.Trace294Generated jido_signal app295==> jsv296Compiling 75 files (.ex)297Generated jsv app298==> lua299Compiling 7 files (.ex)300     warning: this clause of defp format_error/2 is never used (or it will always fail/warn when invoked)301     │302 177 │   defp format_error(_, {:undefined, args}) do303     │        ~304     │305     └─ lib/lua/util.ex:177:8: Lua.Util.format_error/2306307Generated lua app308==> finch309Compiling 22 files (.ex)310Generated finch app311warning: "xref: [exclude: ...]" in your mix.exs file is deprecated, instead use: "elixirc_options: [no_warn_undefined: ...]"312  (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:243: Mix.Tasks.Compile.Elixir.xref_exclude_opts/2313  (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:142: Mix.Tasks.Compile.Elixir.run/1314  (mix 1.20.3) lib/mix/task.ex:502: anonymous fn/3 in Mix.Task.run_task/5315  (mix 1.20.3) lib/mix/task.compiler.ex:299: Mix.Task.Compiler.run_compiler/2316  (mix 1.20.3) lib/mix/task.compiler.ex:287: Mix.Task.Compiler.run/4317  (mix 1.20.3) lib/mix/tasks/compile.all.ex:75: Mix.Tasks.Compile.All.do_run/2318319==> req320Compiling 19 files (.ex)321Generated req app322==> llm_db323Compiling 65 files (.ex)324Generated llm_db app325==> req_llm326Compiling 219 files (.ex)327Compiling lib/mix/tasks/gen.ex (it's taking more than 10s)328Generated req_llm app329==> iconify330Compiling 5 files (.ex)331Generated iconify app332==> jido_action333Compiling 39 files (.ex)334     warning: the following clause cannot match because the previous clauses already matched all possible values:335336         _ ->337338     it attempts to match on the result of:339340         Map.has_key?(message, :message) and is_binary(message.message)341342     which has the already matched type:343344         dynamic(false)345346     type warning found at:347     │348 147 │         if Map.has_key?(message, :message) and is_binary(message.message) do349     │         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~350     │351     └─ lib/jido_action/exec/telemetry.ex:147: Jido.Exec.Telemetry.extract_safe_error_message/1352353Generated jido_action app354==> jido355Compiling 126 files (.ex)356Generated jido app357==> jido_ai358Compiling 170 files (.ex)359Generated jido_ai app360==> phoenix_live_view361Compiling 55 files (.ex)362Generated phoenix_live_view app363==> ghostty364Compiling 19 files (.ex)36536622:02:34.957 [debug] Downloading NIF from https://github.com/dannote/ghostty_ex/releases/download/v0.4.9/Elixir.Ghostty.PTY.Nif-v0.4.9-x86_64-linux-gnu.so.tar.gz36736822:02:35.356 [debug] Downloading NIF from https://github.com/dannote/ghostty_ex/releases/download/v0.4.9/Elixir.Ghostty.Terminal.Nif-v0.4.9-x86_64-linux-gnu.so.tar.gz369Generated ghostty app370Compiled 9 TypeScript modules → priv/static/ghostty.js371==> cringe372Compiling 39 files (.ex)373Generated cringe app374==> ttycast375Compiling 29 files (.ex)376     warning: the variable "footer_magic_len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator377     │378 101 │       <<^footer_magic::binary-size(footer_magic_len), trailer_offset::64>> ->379     │                                    ~380     │381     └─ lib/ttycast/reader.ex:101:36: TTYCast.Reader.decode_footer/1382383     warning: the variable "trailer_magic_len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator384     │385 115 │          <<^trailer_magic::binary-size(trailer_magic_len), trailer_len::64>> <- prefix,386     │                                        ~387     │388     └─ lib/ttycast/reader.ex:115:40: TTYCast.Reader.read_trailer_at/2389390    warning: the variable "header_len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator391    │392 38 │       <<header_binary::binary-size(header_len), _tail::binary>> ->393    │                                    ~394    │395    └─ lib/ttycast/reindex.ex:38:36: TTYCast.Reindex.decode_header/1396397    warning: the variable "offset" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator398    │399 51 │       <<_prefix::binary-size(offset), "TTYCAST_INDEX\0", _rest::binary>> ->400    │                              ~401    │402    └─ lib/ttycast/reindex.ex:51:30: TTYCast.Reindex.scan_chunks/3403404    warning: the variable "offset" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator405    │406 54 │       <<_prefix::binary-size(offset), compressed_len::64, uncompressed_len::64, start_t_us::64,407    │                              ~408    │409    └─ lib/ttycast/reindex.ex:54:30: TTYCast.Reindex.scan_chunks/3410411Generated ttycast app412==> mdex413Compiling 11 files (.ex)414Compiling lib/mdex/document.ex (it's taking more than 10s)415Generated mdex app416==> phoenix_iconify417Compiling 8 files (.ex)418Generated phoenix_iconify app419==> phoenix_streamdown420Compiling 4 files (.ex)421Generated phoenix_streamdown app422==> npm423Compiling 195 files (.ex)424Generated npm app425==> quickbeam426Compiling 40 files (.ex)42742822:03:03.862 [debug] Downloading NIF from https://github.com/elixir-volt/quickbeam/releases/download/v0.10.20/Elixir.QuickBEAM.Native-v0.10.20-x86_64-linux-gnu.so.tar.gz429Generated quickbeam app430==> reach431Compiling 231 files (.ex)432    warning: unused require Logger433    │434  4 │   require Logger435    │   ~436    │437    └─ lib/reach/cli/pipe.ex:4:3438439    warning: Makeup.highlight_inner_html/2 is undefined (module Makeup is not available or is yet to be defined). Make sure the module name is correct and has been specified in full (or that an alias has been defined)440    │441 47 │       Makeup.highlight_inner_html(source, lexer_opts(lang))442    │              ~443    │444    └─ lib/reach/visualize/source.ex:47:14: Reach.Visualize.Source.highlight_source/2445446    warning: Makeup.stylesheet/0 is undefined (module Makeup is not available or is yet to be defined). Make sure the module name is correct and has been specified in full (or that an alias has been defined)447    │448 26 │       Makeup.stylesheet()449    │              ~450    │451    └─ lib/reach/visualize.ex:26:14: Reach.Visualize.makeup_stylesheet/0452453     warning: this clause of defp call_label/1 is never used (or it will always fail/warn when invoked)454     │455 362 │   defp call_label(%{module: nil, name: name}), do: Atom.to_string(name)456     │        ~457     │458     └─ lib/reach/smell/checks/trivial_delegate.ex:362:8: Reach.Smell.Checks.TrivialDelegate.call_label/1459460     warning: this clause of defp domain_module?/1 is never used (or it will always fail/warn when invoked)461     │462 646 │   defp domain_module?(_), do: false463     │        ~464     │465     └─ lib/reach/plugins/ash.ex:646:8: Reach.Plugins.Ash.domain_module?/1466467     warning: this clause of defp classify_from_inferred/3 is never used (or it will always fail/warn when invoked)468     │469 635 │     defp classify_from_inferred(_, _, _), do: nil470     │          ~471     │472     └─ lib/reach/effects.ex:635:10: Reach.Effects.classify_from_inferred/3473474     warning: the following clause cannot match because the previous clauses already matched all possible values:475476         _ ->477478     it attempts to match on the result of:479480         nif_module?(module)481482     which has the already matched type:483484         dynamic(false)485486     type warning found at:487     │488 888 │     if nif_module?(module), do: :nif489     │     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~490     │491     └─ lib/reach/effects.ex:888: Reach.Effects.classify_nif/1492493     warning: the following clause is redundant:494495         defp send_function?(Process, :send)496497     it has type:498499         Process, :send500501     previous clauses have already matched on the following types:502503         term(), :send504         GenServer, :call505         GenServer, :cast506         GenServer, :reply507508     │509 916 │   defp send_function?(Process, :send), do: true510     │        ~511     │512     └─ lib/reach/effects.ex:916:8: Reach.Effects.send_function?/2513514Generated reach app515==> volt516Compiling 101 files (.ex)517Generated volt app518==> ex_gram519Compiling 82 files (.ex)520Compiling lib/ex_gram.ex (it's taking more than 10s)521Generated ex_gram app522==> vibe523Compiling 508 files (.ex)524     warning: the variable "length" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator525     │526 192 │       <<body::binary-size(length), tail::binary>> = rest527     │                           ~528     │529     └─ lib/vibe/code/lsp/client.ex:192:27: Vibe.Code.LSP.Client.parse_one/1530531    warning: the variable "skip" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator532    │533 46 │       <<_segment::binary-size(skip), tail::binary>> -> jpeg_segments(tail)534    │                               ~535    │536    └─ lib/vibe/image/dimensions.ex:46:31: Vibe.Image.Dimensions.jpeg_segments/1537538    warning: unused require Logger539    │540  5 │   require Logger541    │   ~542    │543    └─ lib/vibe/plugin/manager.ex:5:3544545Compiling lib/vibe/model/error.ex (it's taking more than 10s)546Compiling lib/vibe/context/serializer.ex (it's taking more than 10s)547Compiling lib/vibe/context/compactor.ex (it's taking more than 10s)548Compiling lib/vibe/storage/representation/event.ex (it's taking more than 10s)549    error: Lumis.Theme.Style.__struct__/1 is undefined, cannot expand struct Lumis.Theme.Style. Make sure the struct name is correct. If the struct name exists and is correct but it still cannot be found, you likely have cyclic module usage in your code550    │551  8 │       "attribute" => %Lumis.Theme.Style{fg: "#8f8f8f"},552    │                      ^553    │554    └─ lib/vibe/tui/syntax.ex:8:22: Vibe.TUI.Syntax (module)555556557== Compilation error in file lib/vibe/tui/syntax.ex ==558** (CompileError) lib/vibe/tui/syntax.ex: cannot compile module Vibe.TUI.Syntax (errors have been logged)559    (elixir 1.20.3) expanding macro: Kernel.@/1560    lib/vibe/tui/syntax.ex:3: Vibe.TUI.Syntax (module)561could not compile dependency :vibe, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile vibe --force", update it with "mix deps.update vibe" or clean it with "mix deps.clean vibe"