From da0597d07d2723edc4bf3507eaa64a615963e87c Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 2 Mar 2026 15:53:17 +0100
Subject: [PATCH] fixup amend KNOWN_RISKS

---
 docs/KNOWN_RISKS.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/KNOWN_RISKS.md b/docs/KNOWN_RISKS.md
index 0b22ce0b0c..2c3988bdd3 100644
--- a/docs/KNOWN_RISKS.md
+++ b/docs/KNOWN_RISKS.md
@@ -144,3 +144,6 @@ and secure algorithms.
 When asking curl or libcurl to automatically decompress data on arrival, there
 is a risk that the size of the output from the decompression process ends up
 many times larger than the input data size.
+
+Since curl 8.20.0, users can mitigate this risk by setting the max filesize
+option that also covers the decompressed size.