JWT create token with HS256 + public key (.pem) jwt.rb link Apache Struts2 S2-045 s02-045.txt CVE-2015-3224 ruby-on-rails-web-console2-rce.rb CVE-2015-3224 Werkzeug DEBUG Werkzeug RCE import subprocess; subprocess.call(["payload"]); Unickle Pickle python injection pickle