Hi .+,
1. Regarding to the following vulnerability in the *Google Brotli
decoder library*:
1. CVE-2026-111497 (CVSSv4.0 9.2) (also known as Brotli2Shell,
Node2Shell, HTTP2Shell, Broccoli2Shell, and Brotlipocalypse).
2. I have only found info on the following affected Java library:
1. brotli4j, used by Netty-based stacks (fix: upgrade to 1.24.0,
which bundles Brotli 1.2.1).
3. *Do we already have info on:*
1. More vulnerabilitiesin the broader Java eco system ?
2. Specific Groovy vulnerabilities ?
Cheers,
mg
