Is your Brotli library built from older than the February commit? (The last tagged release is before then.)

If so, might be vulnerable.

Don't have Brotli enabled? Not vulnerable to this.