`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,664 Dependabot PRs

Latest PR:
about 18 hours ago

Unique Repositories:
793 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published about 2 months ago • updated about 16 hours ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 2 months ago • updated about 16 hours ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated about 9 hours ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps)(deps): bump the patch-updates group across 1 directory with 17 updates

misty-step/gitpulse #146

6.37.0 → 6.37.3 Patch PR

Open 4 months ago 3 comments

Bump the dependencies group across 1 directory with 11 updates

RasengunShotaro/pdcxa #312

6.37.1 → 6.37.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump @clerk/nextjs from 6.37.1 to 6.37.3

neblify/nios-prep #13

6.37.1 → 6.37.3 Patch PR

Open 4 months ago 1 comment

chore(deps)(deps): bump the patch-updates group across 1 directory with 17 updates

misty-step/gitpulse #144

6.37.0 → 6.37.1 Patch PR

Closed 4 months ago 5 comments

chore(deps): bump the production group with 14 updates

josedab/agentops #10

6.37.0 → 6.37.1 Patch PR

Open 4 months ago 1 comment

chore(deps): Bump the production-dependencies group across 1 directory with 4 updates

galaxy-co-ai/nerve-agent #4

6.37.0 → 6.37.1 Patch PR

Open 5 months ago 3 comments

chore: bump the npm-deps group with 40 updates

hadrian89/next-agent-flow-builder #1

6.36.5 → 6.36.10 Patch PR

Closed 5 months ago 1 comment

chore(deps): Bump the minor-and-patch group with 7 updates

bgonz808/hypeshelf #20

6.36.9 → 6.36.10 Patch PR

Closed 5 months ago 2 comments

deps(deps): bump the production-dependencies group with 5 updates

JSB2010/jacobbarkin.com #96

6.36.8 → 6.36.10 Patch PR

Open 5 months ago 4 comments

chore(deps): bump the minor-and-patch group with 16 updates

clduab11/pricehawk #68

6.36.8 → 6.36.10 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

DeadshotOMEGA/mcquest_designer #92

6.36.5 → 6.36.10 Patch PR

Closed 5 months ago 2 comments

chore(deps)(deps): bump the production-dependencies group with 7 updates

Lonli-Lokli/uk-travel-history #210

6.36.8 → 6.36.10 Patch PR

Open 5 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.36.7 to 6.36.10

idimetrix/find-my-domain #37

6.36.7 → 6.36.10 Patch PR

Open 5 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.36.3 to 6.36.10

Ivhene/overwatch-statistics #637

6.36.3 → 6.36.10 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the minor-and-patch group with 9 updates

Laparo/hemera #386

6.36.9 → 6.36.10 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the version group across 1 directory with 17 updates

STEAMer-Academy/steamer-academy.me #289

6.36.7 → 6.36.10 Patch PR

Open 5 months ago 4 comments

chore(deps): bump @clerk/nextjs from 6.36.9 to 6.36.10

jakwakwa/Scol-WatchTower #20

6.36.9 → 6.36.10 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the project-dependencies group across 1 directory with 27 updates

JanSzewczyk/greedy-szumrak #46

6.36.5 → 6.36.10 Patch PR

Open 5 months ago 2 comments

build(deps): bump @clerk/nextjs from 6.36.7 to 6.36.10

bjrump/CarCheck #56

6.36.7 → 6.36.10 Patch PR

Open 5 months ago 3 comments

Bump @clerk/nextjs from 6.36.2 to 6.36.10

CodeFusionEhsan/taskify #50

6.36.2 → 6.36.10 Patch PR

Open 5 months ago 1 comment

Bump the production-deps group with 7 updates

brianlane/reality #26

6.36.8 → 6.36.9 Patch PR

Closed 5 months ago 2 comments

Bump @clerk/nextjs from 6.36.0 to 6.36.9

CoponatRecords/humartz-music #34

6.36.0 → 6.36.9 Patch PR

Closed 5 months ago 2 comments

Bump @clerk/nextjs from 6.36.2 to 6.36.9

Berkay2002/kliv #10

6.36.2 → 6.36.9 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.36.3 to 6.36.9

Ivhene/overwatch-statistics #632

6.36.3 → 6.36.9 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the version group across 1 directory with 13 updates

STEAMer-Academy/steamer-academy.me #288

6.36.7 → 6.36.9 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates

RinKhimera/NOMAQbanq #33

6.36.8 → 6.36.9 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the version group across 1 directory with 11 updates

STEAMer-Academy/steamer-academy.me #287

6.36.7 → 6.36.8 Patch PR

Open 5 months ago 3 comments

Bump @clerk/nextjs from 6.36.6 to 6.36.8

complexdatacollective/network-canvas-monorepo #373

6.36.6 → 6.36.8 Patch PR

Open 5 months ago 5 comments

chore(deps): Bump the production-dependencies group across 1 directory with 22 updates

dmayes77/clientflow #45

6.36.5 → 6.36.8 Patch PR

Open 5 months ago 2 comments

chore(deps)(deps): bump the production-dependencies group with 5 updates

Lonli-Lokli/uk-travel-history #191

6.36.7 → 6.36.8 Patch PR

Open 5 months ago 4 comments

chore(deps): bump @clerk/nextjs from 6.36.5 to 6.36.8

IsmaelMartinez/betis-escocia #287

6.36.5 → 6.36.8 Patch PR

Open 5 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.36.3 to 6.36.8

Ivhene/overwatch-statistics #626

6.36.3 → 6.36.8 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the version group with 10 updates

STEAMer-Academy/steamer-academy.me #286

6.36.7 → 6.36.8 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 16 updates

bldragon101/worklog #143

6.36.5 → 6.36.8 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the npm-dependencies group across 1 directory with 11 updates

michellepace/devflow #32

6.36.5 → 6.36.8 Patch PR

Closed 5 months ago 3 comments

Bump the dependencies group with 54 updates

Aftab48/Haemologix #64

6.36.2 → 6.36.7 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

kleva-j/Summarly #48

6.23.2 → 6.23.3 Patch PR

Open 5 months ago 2 comments

Bump @clerk/nextjs from 6.36.0 to 6.36.7

santiago-tibata/next-forge #2

6.36.0 → 6.36.7 Patch PR

Open 5 months ago 1 comment

deps(deps): bump the production-dependencies group with 5 updates

JSB2010/jacobbarkin.com #84

6.36.5 → 6.36.7 Patch PR

Open 5 months ago 4 comments

build(deps): bump the patch-update group with 3 updates

Benzou65/chat #362

6.36.5 → 6.36.7 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the npm-dependencies group with 8 updates

michellepace/devflow #30

6.36.5 → 6.36.7 Patch PR

Open 5 months ago 2 comments

Bump @clerk/nextjs from 6.36.2 to 6.36.7

CodeFusionEhsan/taskify #38

6.36.2 → 6.36.7 Patch PR

Open 5 months ago 2 comments

Bump the dependencies group with 52 updates

Aftab48/Haemologix #54

6.36.2 → 6.36.7 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the production-minor group with 10 updates

Jackson57279/polaris #10

6.36.5 → 6.36.6 Patch PR

Open 5 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.36.3 to 6.36.6

Ivhene/overwatch-statistics #616

6.36.3 → 6.36.6 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the version group across 1 directory with 20 updates

STEAMer-Academy/steamer-academy.me #273

6.36.0 → 6.36.6 Patch PR

Open 5 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.36.5 to 6.36.6

ahmadk953/tasko #1606

6.36.5 → 6.36.6 Patch PR

Open 5 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 16 updates

TGDev2/Ascendos #10

6.36.3 → 6.36.5 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the minor-and-patch group with 8 updates

astr0n0mer/linkli #5

6.36.2 → 6.36.5 Patch PR

Open 6 months ago 2 comments

chore: bump the npm-deps group across 1 directory with 52 updates

jfeliweb/project-pool-pump-runtime #5

6.36.4 → 6.36.5 Patch PR

Open 6 months ago 3 comments

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,483 (55.7%)

Merged 171 (6.4%)

Closed 829 (31.1%)

PR Types

Major 354 (13.3%)

Minor 1,633 (61.3%)

Patch 496 (18.6%)