- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Weekly downloads
- 213.7K
- Dependents
- 4
- Registry
- npm
Advisories 3
- CVE-2026-42349High 7.6
Clerk: Authorization bypass when combining organization, billing, or reverification checks
Affected: from 1.0.42, fixed in 2.6.31; from 3.0.0, fixed in 3.1.16.
- CVE-2026-34076High 7.4
Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Affected: from 3.1.0, fixed in 3.1.5.
- CVE-2025-53548High 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Affected: from 2.3.0, fixed in 2.4.4.