Skip to content

Comatibility broken with Brotli@1.2.0 #208

Closed
#207
Closed
Comatibility broken with Brotli@1.2.0#208
#207

Description

@miurahr
miurahr
opened on Nov 10, 2025

Brotli version 1.2.0 has released with signature change of Decompressor.process(data, output_buffer_limit) to fix the CVE-2025-6176 vulnerability.
This breaks compatibility between brotli and brotlicffi.

Because the change is security fix, it is urgent.

Could you add optional argument output_buffer_limit for compatibility?

Activity

  1. miurahr commented on Nov 10, 2025

    @miurahr
    miurahr
    on Nov 10, 2025
    Author

    ref PR #207

  2. sethmlarson
    closed this as completedin #207on Nov 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions