What’s Vulnerable › Products

@clerk Clerk/Express vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @clerk Clerk/Express version is affected

Latest @clerk Clerk/Express vulnerabilities

• CVE-2026-42349 — Clerk: Authorization bypass when combining organization, billing, or reverification checks (CVSS 8.1)