briquet fa20d52248 🔒️(all) upgrade brotli to fix CVE-2026-111497 ...

CVE-2026-111497 is an out-of-bounds write in the brotli decoder,
reachable by decompressing crafted brotli data.

- backend: upgrade Brotli to 1.2.1, used by urllib3 and aiohttp to
  decode "Content-Encoding: br" responses
- docker: require brotli-libs >= 1.2.1-r0 in the backend, summary and
  frontend images, the nginx base image ships 1.2.0-r1
- frontend: build the Outlook add-in on Node 22.23.4, Node 20 is EOL
  and will not get the fix

https://www.strix.ai/cve/CVE-2026-111497

2026-10-23 21:46:44 +02:00

..

addons/outlook

🚨(ci) fix the spellcheck job

2026-10-01 00:13:36 +02:00

agents

🔖(minor) bump release to 1.36.2

2026-10-21 21:59:23 +02:00

backend

🔒️(all) upgrade brotli to fix CVE-2026-111497

2026-10-23 21:46:44 +02:00

frontend

🔒️(all) upgrade brotli to fix CVE-2026-111497

2026-10-23 21:46:44 +02:00

helm

🔖(helm) release chart 0.0.29

2026-10-20 15:35:54 +02:00

mail

🔖(minor) bump release to 1.36.2

2026-10-21 21:59:23 +02:00

sdk

🔖(minor) bump release to 1.36.2

2026-10-21 21:59:23 +02:00

summary

🔒️(all) upgrade brotli to fix CVE-2026-111497

2026-10-23 21:46:44 +02:00