Microsoft pushed an emergency .NET patch Sunday

Brotli's streaming decoder holds an eight-byte internal buffer for input it has not finished reading....