# Brotli 1.2.0 used by AWX - HTTP2Shell CVE-2026-111497

**URL:** <https://forum.ansible.com/t/brotli-1-2-0-used-by-awx-http2shell-cve-2026-111497/46541>\
**Category:** Get Help\
**Tags:** awx\
**Created:** [October 27, 2026, 5:45pm UTC](https://forum.ansible.com/t/brotli-1-2-0-used-by-awx-http2shell-cve-2026-111497/46541 "2026-10-27T17:45:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pakal](https://avatars.discourse-cdn.com/v4/letter/p/e9bcb4/32.png) [@pakal](https://forum.ansible.com/u/pakal)\
**Post date:** [October 27, 2026, 5:45pm UTC](https://forum.ansible.com/t/brotli-1-2-0-used-by-awx-http2shell-cve-2026-111497/46541/1 "2026-10-27T17:45:11Z")

</div>

Hello,

AWX Devel version version uses Brotli library version 1.2.0.

CVE-2026-111497 known as HTTP2Shell is solved by using latest 1.2.1 Brotli.

Anyone has tested to upgrade to 1.2.1 Brotli to verify stability ?

Regards,  
Pakal