@clerk javascript

• CVE-2026-42349 High 7.6 Clerk: Authorization bypass when combining organization, billing, or reverification checks 0.2%
• CVE-2026-34076 High 7.4 Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host 0.3%
• CVE-2025-53548 High 7.5 @clerk/backend Performs Insufficient Verification of Data Authenticity 0.2%
• CVE-2024-22206 Critical 9.1 @clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR) 0.7%