From e900b86832e46f79133e55db631f25b2f23f2217 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Tue, 5 May 2026 04:34:36 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by Orbis Security AI --- lib/json_web_token.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/json_web_token.rb b/lib/json_web_token.rb index 4e8f76dd..5b5b52ba 100644 --- a/lib/json_web_token.rb +++ b/lib/json_web_token.rb @@ -8,6 +8,6 @@ module JsonWebToken end def decode(token) - JWT.decode(token, Rails.application.secret_key_base)[0] + JWT.decode(token, Rails.application.secret_key_base, true, algorithms: ['HS256'])[0] end end