`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,660 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
790 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated about 11 hours ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published about 2 months ago • updated 1 day ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 1 month ago • updated about 11 hours ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the production-dependencies group with 10 updates

ot-nemoto/eval-hub #226

7.0.8 → 7.0.12 Patch PR

Open 2 months ago 1 comment

Bump the production-deps group across 1 directory with 16 updates

brianlane/reality #137

7.0.1 → 7.0.12 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the version group across 1 directory with 11 updates

STEAMer-Academy/steamer-academy.me #340

7.0.11 → 7.0.12 Patch PR

Open 2 months ago 1 comment

build(deps): bump @clerk/nextjs from 7.0.4 to 7.0.12

breverdbidder/zonewise-web #81

7.0.4 → 7.0.12 Patch PR

Open 2 months ago 5 comments

build(deps): bump the patch-update group across 1 directory with 9 updates

Benzou65/chat #426

7.0.8 → 7.0.12 Patch PR

Closed 2 months ago 1 comment

chore: bump the npm-deps group with 32 updates

nmtv711/portfolio #2

7.0.6 → 7.0.11 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the version group across 1 directory with 6 updates

STEAMer-Academy/steamer-academy.me #337

7.0.8 → 7.0.11 Patch PR

Open 2 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates

geraldbahati/my-portfolio #43

7.0.6 → 7.0.8 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump the all-minor-and-patch group across 1 directory with 24 updates

IsmaelMartinez/betis-escocia #372

7.0.6 → 7.0.8 Patch PR

Closed 2 months ago 2 comments

chore(deps): Bump @clerk/nextjs from 7.0.7 to 7.0.8

RaghavOG/HabitFlow #10

7.0.7 → 7.0.8 Patch PR

Closed 2 months ago 2 comments

chore: bump the npm-deps group across 1 directory with 47 updates

Tychenco/ManzilTak-frontend #12

6.39.0 → 6.39.1 Patch PR

Closed 2 months ago 1 comment

chore: bump the npm-deps group with 46 updates

c0d3ster/nextjs-graphql-template #12

6.39.0 → 6.39.1 Patch PR

Closed 2 months ago 1 comment

chore: bump the npm-deps group across 1 directory with 29 updates

Yac0z/speeddy #2

7.0.6 → 7.0.8 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump the all-minor-and-patch group across 1 directory with 20 updates

IsmaelMartinez/betis-escocia #366

7.0.6 → 7.0.7 Patch PR

Open 2 months ago 2 comments

build(deps): bump the web-deps group across 1 directory with 17 updates

sendit2sri/artifact-os #27

7.0.1 → 7.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 9 updates

kapsarovL/e-commerce-nextjs16 #26

7.0.4 → 7.0.7 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the version group with 2 updates

STEAMer-Academy/steamer-academy.me #328

7.0.6 → 7.0.7 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @clerk/nextjs from 7.0.4 to 7.0.6 in the production-dependencies group across 1 directory

Akram012388/niotebook_v0.2 #169

7.0.4 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump the production group with 10 updates

khangpt2k6/Hirea---CaresLink #66

7.0.4 → 7.0.6 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump the version group with 5 updates

STEAMer-Academy/steamer-academy.me #323

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @clerk/nextjs from 7.0.4 to 7.0.5

ahmadk953/tasko #1638

7.0.4 → 7.0.5 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the version group with 3 updates

STEAMer-Academy/steamer-academy.me #320

7.0.4 → 7.0.5 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump @clerk/nextjs from 7.0.1 to 7.0.4

breverdbidder/zonewise-web #39

7.0.1 → 7.0.4 Patch PR

Open 3 months ago 4 comments

Bump @clerk/nextjs from 7.0.1 to 7.0.2 in the clerk group

Sfayson1/crucible #6

7.0.1 → 7.0.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @clerk/nextjs from 7.0.1 to 7.0.2

breverdbidder/zonewise-web #34

7.0.1 → 7.0.2 Patch PR

Open 3 months ago 7 comments

Bump the production-deps group with 4 updates

brianlane/reality #91

6.38.0 → 6.38.3 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the version group across 1 directory with 13 updates

STEAMer-Academy/steamer-academy.me #306

6.38.0 → 6.38.2 Patch PR

Closed 4 months ago 4 comments

build(deps): bump @clerk/nextjs from 6.38.1 to 6.38.2

invidias-codem/ai-saas #43

6.38.1 → 6.38.2 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the version group across 1 directory with 10 updates

STEAMer-Academy/steamer-academy.me #305

6.38.0 → 6.38.2 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the version group across 1 directory with 7 updates

STEAMer-Academy/steamer-academy.me #304

6.38.0 → 6.38.1 Patch PR

Open 4 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.38.0 to 6.38.1

sanidhyy/duolingo-clone #60

6.38.0 → 6.38.1 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates

bldragon101/worklog #166

6.38.0 → 6.38.1 Patch PR

Open 4 months ago 2 comments

deps(deps): bump the minor-patch group across 1 directory with 55 updates

ampersands-ai/artifio-ai #36

6.37.3 → 6.37.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the version group with 5 updates

STEAMer-Academy/steamer-academy.me #301

6.37.4 → 6.37.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.37.3 to 6.37.4

invidias-codem/ai-saas #33

6.37.3 → 6.37.4 Patch PR

Open 4 months ago 2 comments

deps(deps): bump the minor-and-patch group across 1 directory with 17 updates

misty-step/scry #244

6.37.3 → 6.37.4 Patch PR

Open 4 months ago 2 comments

Bump the dependencies group across 1 directory with 18 updates

RasengunShotaro/pdcxa #316

6.37.1 → 6.37.4 Patch PR

Closed 4 months ago 1 comment

deps(deps): bump the minor-patch group across 1 directory with 54 updates

ampersands-ai/artifio-ai #20

6.37.3 → 6.37.4 Patch PR

Closed 4 months ago 3 comments

deps(deps): bump the minor-patch group across 1 directory with 53 updates

ampersands-ai/artifio-ai #9

6.37.3 → 6.37.4 Patch PR

Open 4 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 37 updates

jorgejac1/allylab #36

6.37.1 → 6.37.4 Patch PR

Open 4 months ago 1 comment

Bump the npm-minor-patch group across 1 directory with 9 updates

jmylchreest/refyne-api #18

6.37.1 → 6.37.4 Patch PR

Closed 4 months ago 1 comment

deps(deps): bump the minor-patch group across 1 directory with 55 updates

ampersands-ai/artifio-ai #6

6.37.3 → 6.37.4 Patch PR

Open 4 months ago 2 comments

deps(deps): bump the minor-patch group with 58 updates

ampersands-ai/artifio-ai #4

6.37.3 → 6.37.4 Patch PR

Open 4 months ago 2 comments

chore(deps)(deps): bump the production-dependencies group with 11 updates

Lonli-Lokli/uk-travel-history #255

6.37.2 → 6.37.3 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the minor-and-patch group with 11 updates

VetSecItPro/kaulby-app #62

6.37.1 → 6.37.3 Patch PR

Open 4 months ago 1 comment

Bump the npm-minor-patch group across 1 directory with 5 updates

jmylchreest/refyne-api #14

6.37.1 → 6.37.3 Patch PR

Closed 4 months ago 1 comment

chore: bump the npm-deps group across 1 directory with 17 updates

xhuang9/baby-log #14

6.37.1 → 6.37.3 Patch PR

Open 4 months ago 2 comments

chore: bump the npm-deps group across 1 directory with 18 updates

xhuang9/baby-log #12

6.37.1 → 6.37.3 Patch PR

Open 4 months ago 1 comment

chore(deps)(deps): bump the patch-updates group across 1 directory with 16 updates

misty-step/gitpulse #147

6.37.0 → 6.37.3 Patch PR

Open 4 months ago 3 comments

chore(deps)(deps): bump the patch-updates group across 1 directory with 17 updates

misty-step/gitpulse #146

6.37.0 → 6.37.3 Patch PR

Open 4 months ago 3 comments

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,480 (55.6%)

Merged 171 (6.4%)

Closed 828 (31.1%)

PR Types

Major 354 (13.3%)

Minor 1,630 (61.3%)

Patch 495 (18.6%)