Vulnerabilities

TI-2026-30651 CVE-2026-42349 · GHSA-w24r-5266-9c3c

Clerk: Authorization bypass when combining organization, billing, or reverification checks

HIGH 66

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-11 Fixed in 5.125.10, 6.7.5 +27 CWE-754

TI-2026-29857 CVE-2026-41248 · GHSA-vqx2-fgx2-5wq9

MEDIUM 41

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00323 Published 2026-04-24 Fixed in 1.5.7, 3.0.15 +9 CWE-436

TI-2026-26399 CVE-2026-34076 · GHSA-gjxx-92w9-8v8f

LOW 34

Clerk JavaScript is the official JavaScript repository for Clerk authentication.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00321 Published 2026-04-01 Fixed in 3.2.3, 2.0.7 +2 CWE-918

TI-2025-33492 CVE-2025-53548 · GHSA-9mp4-77wg-rwx9

LOW 38

Clerk helps developers build user management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00172 Published 2025-07-09 Fixed in 2.4.0, 2.10.2 +7 CWE-345

TI-2024-14799 CVE-2024-22206 · GHSA-q6w5-jg5q-47vg

MEDIUM 44

Clerk helps developers build user management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00682 Published 2024-01-12 Fixed in 4.29.3 CWE-284