Turns out the "official" Brotli Java library, org.brotli:dec, which has not seen a public update for *9 years*, is not affected by node2shell/http2shell/brotli4shell/whatever because it's pure Java and not JNDI for once.
If you stayed on the arguably dormant library instead of migrating to newer variants that wrap the Brotli C impl, your next week will look a lot less painful.