Repository navigation

Replace jbrotli Brotli codec with brotli4j for CVE-2026-111497 - #3880

Open

Devdha wants to merge 6 commits into

apache:masterfrom

Devdha:security/brotli4j-codec

Open

Replace jbrotli Brotli codec with brotli4j for CVE-2026-111497#3880
Devdha wants to merge 6 commits into
apache:masterfrom
Devdha:security/brotli4j-codec

Commits on Oct 24, 2026
- Replace jbrotli Brotli codec with brotli4j for CVE-2026-111497
  Devdha
  committed
  a4d4dc1
Commits on Oct 27, 2026
- Fix Brotli codec stream handling and large-page decoding
  Devdha
  committed
  22b938d
- Bound Brotli decompression and fix stream contracts
  Devdha
  committed
  d9f8a1d
- Add Brotli codec regression tests for bounds and stream contracts
  Devdha
  committed
  35e2079
Commits on Oct 29, 2026
- fix: preserve legacy Brotli codec class alias
  Devdha
  committed
  93054b4
- fix: close failed Brotli streams and enforce output bounds
  Devdha
  committed
  14ba766