From af4c424f6c0c75438710c7611479a776d664622a Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Mon, 27 Jul 2026 04:40:29 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 src/lib/helpers/ability.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/lib/helpers/ability.js b/src/lib/helpers/ability.js
index 7cd907aad..3667c7219 100644
--- a/src/lib/helpers/ability.js
+++ b/src/lib/helpers/ability.js
@@ -43,6 +43,7 @@ export const ability = toReactiveAbility(createMongoAbility([]));
  * @returns {void}
  */
 export const updateAbilities = (rules) => {
+  if (!Array.isArray(rules)) return;
   ability.update(rules);
 };