HIGH7.5npm
GHSA-9mp4-77wg-rwx9· CVE-2025-53548@clerk/backend Performs Insufficient Verification of Data Authenticity
Modified: 7/9/2025
package
npm/@clerk/nuxt
pkg:npm/%40clerk/nuxt
CRITICAL9.1npm
GHSA-vqx2-fgx2-5wq9· CVE-2026-41248Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Modified: 5/5/2026
HIGH8.1npm
GHSA-w24r-5266-9c3c· CVE-2026-42349Clerk has an authorization bypass when combining organization, billing, or reverification checks
Modified: 9/10/2026