A vulnerability in Google’s open-source Brotli compression library (CVE-2026-111497) was disclosed publicly on October 21, 2026. An application is exposed only if it decompresses Brotli data that an ...