- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Weekly downloads
- 7.5M
- Dependents
- 85
- Registry
- npm
Advisories 3
- CVE-2026-42349High 7.6
Clerk: Authorization bypass when combining organization, billing, or reverification checks
Affected: from 2.0.0, fixed in 2.33.3; from 3.0.0, fixed in 3.2.14.
- CVE-2026-34076High 7.4
Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Affected: from 3.0.0, fixed in 3.2.3.
- CVE-2025-53548High 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Affected: from 2.0.0, fixed in 2.4.0.