@clerk/clerk-js
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Clerk has an authorization bypass when combining organization, billing, or reverification checks | @clerk/astro@clerk/backend | npm | High | Fix reported | |
| Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage | @clerk/clerk-js | npm | Medium | No fix reported |