Skip to content

fix: bump brotli - #695

Merged
C4illin merged 4 commits into
mainfrom
fix/bump-brotli
Oct 28, 2026
Merged

C4illin merged 4 commits into
mainfrom
fix/bump-brotli

Conversation

@C4illin

@C4illin C4illin commented Oct 28, 2026 •

Copy link
Copy Markdown
Owner

closes: #694


Summary by cubic

Fixes a Brotli vulnerability by installing patched Brotli and brotlicffi versions into the markitdown environment in the Docker image.

  • Installs the patched versions via pipx runpip markitdown install so they replace the bundled ones in markitdown's environment.
  • Temporary workaround; remove the install once the upstream patch is released.

Written for commit b9a22b2. Summary will update on new commits.

View guided diff Turn on auto-fix

@github-actions github-actions Bot added the Fix label Oct 28, 2026

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 1 file

Tip: Get a Slack DM when cubic finishes reviewing your PRs. Connect Slack

View guided diff | Turn on auto-fix | Re-trigger cubic

Comment thread Dockerfile Resolved
@C4illin
C4illin merged commit 42224e3 into main Oct 28, 2026
11 checks passed
@C4illin
C4illin deleted the fix/bump-brotli branch October 28, 2026 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Publish new image: Bun 1.4.2 and Brotli 1.2.0 affected by CVE-2026-111497 (HTTP2Shell)

1 participant