Launch Week Day 1: Announcing Security Design Review
Start for Free
npm

@clerk/backend

View on npm registry
3 Total advisories
3 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 8.1
npm

CVE-2026-42349

Clerk has an authorization bypass when combining organization, billing, or reverification checks
HIGH 7.4
npm

CVE-2026-34076

Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
HIGH 7.5
npm

CVE-2025-53548

@clerk/backend Performs Insufficient Verification of Data Authenticity

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes