- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 critical, 2 high
- Weekly downloads
- 64.7K
- Dependents
- 1
- Registry
- npm
Advisories 3
- CVE-2026-42349High 7.6
Clerk: Authorization bypass when combining organization, billing, or reverification checks
Affected: from 2.0.0, fixed in 2.17.11; from 3.0.0, fixed in 3.0.18.
- CVE-2026-41248Critical 9.1
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Affected: from 0.0.1, fixed in 1.5.7; from 2.0.0-snapshot.v20241206174604, fixed in 2.17.10; from 3.0.0, fixed in 3.0.15.
- CVE-2025-53548High 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Affected: from 2.9.0, fixed in 2.10.2.