clerk

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

clerk records in CISA KEV

No clerk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clerk/astro 1 record HIGH Clerk/backend 1 record HIGH Clerk/chrome-extension 1 record HIGH Clerk/clerk-expo 1 record HIGH Clerk/clerk-js 1 record HIGH Clerk/clerk-react 1 record HIGH Clerk/expo 1 record HIGH Clerk/express 1 record HIGH

Records

1 record in Clerk/clerk-react · all components

TI-2026-30651 CVE-2026-42349 · GHSA-w24r-5266-9c3c

Clerk: Authorization bypass when combining organization, billing, or reverification checks

HIGH 66

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-11 Fixed in 5.125.10, 6.7.5 +27 CWE-754

Open these records in search →