`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,665 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
793 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published 2 months ago • updated 2 days ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated 8 minutes ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 2 months ago • updated about 1 hour ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the dependencies group with 10 updates

RasengunShotaro/pdcxa #95

6.20.0 → 6.20.1 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 41 updates

breJcharAff/gestionnaire_projet_front #1

6.19.0 → 6.19.5 Patch PR

Open about 1 year ago 1 comment

Bump @clerk/nextjs from 6.19.4 to 6.19.5

timmo001/notes.timmo.dev #816

6.19.4 → 6.19.5 Patch PR

Closed about 1 year ago 3 comments

chore(deps): bump @clerk/nextjs from 6.19.4 to 6.19.5

Ivhene/overwatch-statistics #274

6.19.4 → 6.19.5 Patch PR

Open about 1 year ago 2 comments

build(deps): bump @clerk/nextjs from 6.19.4 to 6.19.5

flags-gg/dashboard #1025

6.19.4 → 6.19.5 Patch PR

Merged about 1 year ago

Bump @clerk/nextjs from 6.19.4 to 6.19.5

timmo001/scratchpad.timmo.dev #648

6.19.4 → 6.19.5 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 41 updates

jaggedbytes/by-road #1

6.19.0 → 6.19.5 Patch PR

Open about 1 year ago

Bump the dependencies group with 15 updates

RasengunShotaro/pdcxa #80

6.19.4 → 6.19.5 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 40 updates

audval/udval #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 40 updates

hwslim/hwslim.github.io #2

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago

chore: bump the npm-deps group with 39 updates

agenthimzz/nextjs-template #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 39 updates

Makoyo-del/cert-generator #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago

Bump the dependencies group across 1 directory with 9 updates

RasengunShotaro/pdcxa #79

6.19.3 → 6.19.4 Patch PR

Open about 1 year ago

build(deps): bump @clerk/nextjs from 6.19.2 to 6.19.4

aafnnp/site #352

6.19.2 → 6.19.4 Patch PR

Open about 1 year ago 3 comments

chore: bump the npm-deps group with 33 updates

msgadi/aws-documentdb-export-tool #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago

chore: bump the npm-deps group with 33 updates

lyori6/builtit2 #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago

chore: bump the npm-deps group with 33 updates

ryanandrewdavidson/Next-js-Boilerplate #1

6.19.0 → 6.19.4 Patch PR

Open about 1 year ago 1 comment

Bump @clerk/nextjs from 6.19.3 to 6.19.4

timmo001/scratchpad.timmo.dev #639

6.19.3 → 6.19.4 Patch PR

Merged about 1 year ago 1 comment

Bump the dependencies group with 6 updates

RasengunShotaro/pdcxa #78

6.19.3 → 6.19.4 Patch PR

Closed about 1 year ago 2 comments

build(deps): bump @clerk/nextjs from 6.19.2 to 6.19.4

pacemakerIT/pacemaker-video #198

6.19.2 → 6.19.4 Patch PR

Merged about 1 year ago

Bump @clerk/nextjs from 6.19.2 to 6.19.4

timmo001/notes.timmo.dev #796

6.19.2 → 6.19.4 Patch PR

Merged about 1 year ago 1 comment

chore(deps): bump @clerk/nextjs from 6.19.3 to 6.19.4

Ivhene/overwatch-statistics #264

6.19.3 → 6.19.4 Patch PR

Merged about 1 year ago 1 comment

build(deps): bump @clerk/nextjs from 6.19.3 to 6.19.4

flags-gg/dashboard #1007

6.19.3 → 6.19.4 Patch PR

Closed about 1 year ago 1 comment

build(deps): bump the patch-update group with 12 updates

Benzou65/chat #285

6.19.1 → 6.19.3 Patch PR

Open about 1 year ago

Bump the dependencies group across 1 directory with 13 updates

RasengunShotaro/pdcxa #77

6.19.2 → 6.19.3 Patch PR

Open about 1 year ago 1 comment

Bump @clerk/nextjs from 6.19.2 to 6.19.3

timmo001/notes.timmo.dev #792

6.19.2 → 6.19.3 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump @clerk/nextjs from 6.19.2 to 6.19.3

Ivhene/overwatch-statistics #262

6.19.2 → 6.19.3 Patch PR

Merged about 1 year ago 1 comment

build(deps): bump @clerk/nextjs from 6.19.2 to 6.19.3

flags-gg/dashboard #1003

6.19.2 → 6.19.3 Patch PR

Merged about 1 year ago

Bump @clerk/nextjs from 6.19.2 to 6.19.3

timmo001/scratchpad.timmo.dev #632

6.19.2 → 6.19.3 Patch PR

Open about 1 year ago 1 comment

Bump the dependencies group with 10 updates

RasengunShotaro/pdcxa #76

6.19.2 → 6.19.3 Patch PR

Closed about 1 year ago 2 comments

chore: bump the npm-deps group with 19 updates

Pham-Dang-Khoi/next-js-boilerplate #1

6.19.0 → 6.19.2 Patch PR

Merged about 1 year ago

Bump the dependencies group across 1 directory with 13 updates

RasengunShotaro/pdcxa #74

6.19.1 → 6.19.2 Patch PR

Open about 1 year ago 1 comment

chore: bump the npm-deps group with 19 updates

Amaraa0424/starter #1

6.19.0 → 6.19.2 Patch PR

Closed about 1 year ago 1 comment

Bump the dependencies group with 12 updates

RasengunShotaro/pdcxa #73

6.19.1 → 6.19.2 Patch PR

Open about 1 year ago 2 comments

Bump @clerk/nextjs from 6.19.1 to 6.19.2

timmo001/whats-up #664

6.19.1 → 6.19.2 Patch PR

Merged about 1 year ago

build(deps): bump @clerk/nextjs from 6.19.1 to 6.19.2

flags-gg/dashboard #985

6.19.1 → 6.19.2 Patch PR

Closed about 1 year ago 1 comment

chore: bump the npm-deps group with 15 updates

MateuszAdamczyk77/next.js-boilerplate #1

6.19.0 → 6.19.2 Patch PR

Open about 1 year ago

chore: bump the npm-deps group with 13 updates

migkjy/Next-js-Boilerplate-0b286 #1

6.19.0 → 6.19.1 Patch PR

Open about 1 year ago

chore: bump the npm-deps group with 13 updates

ixartz/Next-js-Boilerplate #394

6.19.0 → 6.19.1 Patch PR

Closed about 1 year ago 2 comments

chore: bump the npm-deps group with 13 updates

ixartz/Next-js-Boilerplate #393

6.19.0 → 6.19.1 Patch PR

Open about 1 year ago 3 comments

chore(deps): bump the npm-deps group with 13 updates

ixartz/Next-js-Boilerplate #392

6.19.0 → 6.19.1 Patch PR

Closed about 1 year ago 2 comments

chore(deps): bump @clerk/nextjs from 6.19.0 to 6.19.1

ixartz/Next-js-Boilerplate #388

6.19.0 → 6.19.1 Patch PR

Closed about 1 year ago 3 comments

Bump the minor-patch group across 1 directory with 17 updates

zaktech96/podcast2newsletter #12

6.18.2 → 6.18.5 Patch PR

Open about 1 year ago 3 comments

build(deps): bump the production-dependencies group across 1 directory with 2 updates

EviewNicks/Maguru-Next #69

6.18.0 → 6.18.5 Patch PR

Closed about 1 year ago 3 comments

Bump @clerk/nextjs from 6.12.3 to 6.12.12

ogabrielsant/rentx #20

6.12.3 → 6.12.12 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the dependencies group with 5 updates

GrayGhostDev/Midway_Cleaning_app #32

6.10.3 → 6.10.6 Patch PR

Open over 1 year ago

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,484 (55.7%)

Merged 171 (6.4%)

Closed 829 (31.1%)

PR Types

Major 354 (13.3%)

Minor 1,634 (61.3%)

Patch 496 (18.6%)