From 605dcace54be68421c6562b9c26e5182fb177e76 Mon Sep 17 00:00:00 2001
From: Fabian Reinold <32450519+freinold@users.noreply.github.com>
Date: Mon, 23 Feb 2026 16:59:55 +0100
Subject: [PATCH] fix(gravatar): Update hash algorithm to SHA-256 for improved
 security (#1550)

---
 server/api/helpers/users/build-gravatar-url.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/api/helpers/users/build-gravatar-url.js b/server/api/helpers/users/build-gravatar-url.js
index 408fc654..b5f52af4 100644
--- a/server/api/helpers/users/build-gravatar-url.js
+++ b/server/api/helpers/users/build-gravatar-url.js
@@ -20,7 +20,7 @@ module.exports = {
       return null;
     }
 
-    const hash = crypto.createHash('md5').update(inputs.record.email).digest('hex');
+    const hash = crypto.createHash('sha256').update(inputs.record.email).digest('hex');
     return `${sails.config.custom.gravatarBaseUrl}${hash}?s=180&d=initials`;
   },
 };