Repository navigation

Exclude Brotli from the default AutomaticDecompression while CVE-2026-111497 is unpatched in .NET - #2419

Closed

K3UL wants to merge 2 commits into

restsharp:devfrom

K3UL:fix/brotli-default-cve-2026-111497

Closed

Exclude Brotli from the default AutomaticDecompression while CVE-2026-111497 is unpatched in .NET#2419
K3UL wants to merge 2 commits into
restsharp:devfrom
K3UL:fix/brotli-default-cve-2026-111497

Commits on Oct 24, 2026
- Exclude Brotli from default AutomaticDecompression (CVE-2026-111497)
  
  K3UL
  authored and
  Mickael Vest
  committed
  31cc155
- Docs: qualify the gzip fallback; a br response from a non-compliant server is returned undecoded
  Mickael Vest
  committed
  90c3011