@clerk nextjs

• CVE-2026-42349 High 7.6 Clerk: Authorization bypass when combining organization, billing, or reverification checks 0.2%
• CVE-2026-41248 Critical 9.1 Official Clerk JavaScript SDKs: Middleware-based route protection bypass 0.3%