clerk vulnerabilities
5 published CVEs name clerk among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42349
Clerk: Authorization bypass when combining organization, billing, or reverification checks
clerk · javascript
High7.6 - CVE-2026-41248
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
clerk · astro
Critical9.1 - CVE-2026-34076
Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
clerk · javascript
High7.4 - CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
clerk · javascript
High7.5 - CVE-2024-22206
@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)
clerk · javascript
Critical9.1