- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Weekly downloads
- 597.2K
- Dependents
- 4
- Registry
- npm
Advisories 3
- CVE-2026-42349High 7.6
Clerk: Authorization bypass when combining organization, billing, or reverification checks
Affected: from 0.1.0, fixed in 1.7.79; from 2.0.0, fixed in 2.1.6.
- CVE-2026-34076High 7.4
Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Affected: from 2.0.0, fixed in 2.0.7.
- CVE-2025-53548High 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Affected: from 1.6.0, fixed in 1.7.4.