Skip to content
OpenAdvisories

Product · clerk

tanstack-react-start

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-42349

    Clerk: Authorization bypass when combining organization, billing, or reverification checks

    Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other framework SDKs can return true for certain combined authori…

    clerk javascript astro nuxt Browsers npm