Is caddy affected by the recent brotli CVE-2026-111497

Hello,

The title says it all, is caddy affected by the brotli CVE-2026-111497 ? Doesn’t seems so, but I’d rather have a confirmation here if possible.

For some explanations, Brotli vulnerability (CVE-2026-111497) — Patch the Planet

Thanks & regards !

I have not received any report yet that it is. We don’t use Google’s decoder AFAIK.