clerk

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

clerk records in CISA KEV

No clerk vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2026-30651 CVE-2026-42349 · GHSA-w24r-5266-9c3c

HIGH 66

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-11 Fixed in 5.125.10, 6.7.5 +27 CWE-754

TI-2024-14799 CVE-2024-22206 · GHSA-q6w5-jg5q-47vg

MEDIUM 44

Clerk helps developers build user management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00682 Published 2024-01-12 Fixed in 4.29.3 CWE-284

TI-2026-29857 CVE-2026-41248 · GHSA-vqx2-fgx2-5wq9

MEDIUM 41

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00323 Published 2026-04-24 Fixed in 1.5.7, 3.0.15 +9 CWE-436

TI-2025-33492 CVE-2025-53548 · GHSA-9mp4-77wg-rwx9

LOW 38

Clerk helps developers build user management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00172 Published 2025-07-09 Fixed in 2.4.0, 2.10.2 +7 CWE-345

TI-2026-26399 CVE-2026-34076 · GHSA-gjxx-92w9-8v8f

LOW 34

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00321 Published 2026-04-01 Fixed in 3.2.3, 2.0.7 +2 CWE-918