Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...