From 759a2ec1d33241842481cb704dc25a74f6bd6df7 Mon Sep 17 00:00:00 2001
From: Ishan Vyas <ishan@passbolt.com>
Date: Fri, 9 Jan 2026 14:28:03 +0530
Subject: [PATCH] PB-47677 Add firebase/php-jwt v7.* support to fix
 CVE-2025-45769

---
 .gitignore    | 1 +
 composer.json | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 1bb8cf8..eb3dd24 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,6 @@
 build
 vendor
+composer.lock
 *.swp
 *.swo
 .idea
diff --git a/composer.json b/composer.json
index b5e76bb..8e1fc17 100644
--- a/composer.json
+++ b/composer.json
@@ -20,7 +20,7 @@
         "php": ">=7.4",
         "ext-curl": "*",
         "ext-json": "*",
-        "firebase/php-jwt": "^6.0"
+        "firebase/php-jwt": "^6.0 || ^7.0"
     },
     "require-dev": {
         "phpunit/phpunit": "^9.0",