HIGH7.4npm
GHSA-gjxx-92w9-8v8f· CVE-2026-34076Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Modified: 4/6/2026
package
npm/@clerk/hono
pkg:npm/%40clerk/hono
HIGH8.1npm
GHSA-w24r-5266-9c3c· CVE-2026-42349Clerk has an authorization bypass when combining organization, billing, or reverification checks
Modified: 9/10/2026