The version it bundles is apparently insecure: <https://github.com/bitemyapp/brotli2-rs/issues/45>
As mentioned at <https://github.com/actix/actix-web/issues/2537>, there have been multiple PR updating it to new PR but they were abandoned, so it appears we have to remove rust-brotli-sys entirely (in favour of rust-brotli?) or merge one of them (or better: unbundle) things on our own.
Greetings, Maxime.
OpenPGP_0x49E3EE22191725EE.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature