pkg:npm/@clerk/clerk-js
2 total CVEsHIGH2
✅ Check your installed version
All known vulnerabilities
HIGH8.1CVE-2026-42349Clerk has an authorization bypass when combining organization, billing, or reverification checks >= 5.22.0, < 5.125.10
HIGH7.5CVE-2025-63700Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage from 0, <= 5.88.0