Skip to content
OpenAdvisories

Product · clerk

shared

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-41248

    Official Clerk JavaScript SDKs: Middleware-based route protection bypass

    Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handl…

    clerk nextjs nuxt shared npm