briquet fa20d52248 🔒️(all) upgrade brotli to fix CVE-2026-111497 ...

CVE-2026-111497 is an out-of-bounds write in the brotli decoder,
reachable by decompressing crafted brotli data.

- backend: upgrade Brotli to 1.2.1, used by urllib3 and aiohttp to
  decode "Content-Encoding: br" responses
- docker: require brotli-libs >= 1.2.1-r0 in the backend, summary and
  frontend images, the nginx base image ships 1.2.0-r1
- frontend: build the Outlook add-in on Node 22.23.4, Node 20 is EOL
  and will not get the fix

https://www.strix.ai/cve/CVE-2026-111497

2026-10-23 21:46:44 +02:00

..

auth

🔨(tilt) improve local stack

2024-12-16 23:41:09 +01:00

compose.d

🔒️(devex) bind ports in compose.yaml to localhost

2026-10-13 18:21:04 +02:00

dinum-frontend

🔒️(all) upgrade brotli to fix CVE-2026-111497

2026-10-23 21:46:44 +02:00

files

✨(backend) add structured audit logging facility

2026-10-19 15:25:43 +02:00

livekit

🔧(podman) pin the livekit rtc section for local usage

2026-09-18 15:17:29 +02:00

resource-server

🔧(backend) add Docker network for shared Keycloak OIDC authentication

2025-11-24 18:23:38 +01:00