npm/@clerk/express

@clerk/backend Performs Insufficient Verification of Data Authenticity

Modified: 7/9/2025

Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host

Modified: 4/6/2026

Clerk has an authorization bypass when combining organization, billing, or reverification checks

Modified: 9/10/2026