- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 critical, 2 high
- Weekly downloads
- 41.7K
- Dependents
- 0
- Registry
- npm
Advisories 3
- CVE-2026-42349High 7.6
Clerk: Authorization bypass when combining organization, billing, or reverification checks
Affected: from 1.0.0, fixed in 1.13.29; from 2.0.0, fixed in 2.2.5.
- CVE-2026-41248Critical 9.1
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Affected: from 1.1.0, fixed in 1.13.28; from 2.0.0, fixed in 2.2.2.
- CVE-2025-53548High 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Affected: from 1.7.0, fixed in 1.7.5.