`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,665 Dependabot PRs

Latest PR:
about 18 hours ago

Unique Repositories:
793 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published 2 months ago • updated 1 day ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 2 months ago • updated about 1 hour ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated 1 day ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the dependencies group across 1 directory with 15 updates

RasengunShotaro/pdcxa #235

6.31.8 → 6.31.10 Patch PR

Open 9 months ago

Bump the all-pnpm-deps group across 1 directory with 9 updates

taichi-web-engineer/habit-log-frontend #55

6.31.9 → 6.31.10 Patch PR

Open 9 months ago

chore: bump the npm-deps group with 31 updates

chiragbidx/nextjs-starter #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 1 comment

chore: bump the npm-deps group with 31 updates

6Kmfi6HP/refundgo-saas #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 1 comment

chore: bump the npm-deps group with 31 updates

mg87822/Nextjs-boilerplate #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 1 comment

Bump the dependencies group across 1 directory with 14 updates

RasengunShotaro/pdcxa #234

6.31.8 → 6.31.10 Patch PR

Open 9 months ago

deps(example): bump the dependencies group across 1 directory with 4 updates

arcjet/arcjet-js #5167

6.31.6 → 6.31.10 Patch PR

Closed 9 months ago 3 comments

deps(example): bump the dependencies group across 1 directory with 4 updates

arcjet/arcjet-js #5166

6.31.6 → 6.31.10 Patch PR

Closed 9 months ago 3 comments

deps(example): bump the dependencies group across 1 directory with 2 updates

arcjet/arcjet-js #5165

6.31.6 → 6.31.10 Patch PR

Open 9 months ago

chore: bump the npm-deps group with 31 updates

julianthant/style-nation #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 1 comment

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 18 updates

arcjet/arcjet-docs #625

6.31.2 → 6.31.10 Patch PR

Open 9 months ago 1 comment

chore: bump the npm-deps group across 1 directory with 28 updates

ennuirose/Company-Website #3

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 2 comments

chore: bump the npm-deps group with 29 updates

ennuirose/Company-Website #2

6.31.3 → 6.31.10 Patch PR

Open 9 months ago

Bump @clerk/nextjs from 6.31.9 to 6.31.10

timmo001/notes.timmo.dev #1119

6.31.9 → 6.31.10 Patch PR

Merged 9 months ago 1 comment

build(deps): bump @clerk/nextjs from 6.31.9 to 6.31.10

flags-gg/dashboard #1426

6.31.9 → 6.31.10 Patch PR

Merged 9 months ago

chore: bump the npm-deps group with 30 updates

Kenkyoo/app-nextjs #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 3 comments

chore: bump the npm-deps group with 30 updates

benjamin1160/Land4u #1

6.31.3 → 6.31.10 Patch PR

Open 9 months ago 1 comment

build(deps): bump @clerk/nextjs from 6.31.9 to 6.31.10

retro-board/frontend-again #199

6.31.9 → 6.31.10 Patch PR

Merged 9 months ago

Bump @clerk/nextjs from 6.31.9 to 6.31.10

timmo001/scratchpad.timmo.dev #917

6.31.9 → 6.31.10 Patch PR

Merged 9 months ago 1 comment

Bump the dependencies group across 1 directory with 13 updates

RasengunShotaro/pdcxa #233

6.31.8 → 6.31.10 Patch PR

Open 9 months ago 1 comment

chore: bump the npm-deps group with 29 updates

bibin765/testreponextjs #2

6.31.3 → 6.31.10 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.31.9 to 6.31.10

bastosmichael/coder #266

6.31.9 → 6.31.10 Patch PR

Open 9 months ago

build(deps): bump @clerk/nextjs from 6.31.8 to 6.31.9

flags-gg/dashboard #1423

6.31.8 → 6.31.9 Patch PR

Open 9 months ago

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 16 updates

arcjet/arcjet-docs #623

6.31.2 → 6.31.9 Patch PR

Closed 9 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.31.2 to 6.31.9

Akshay-Vs/hwei #195

6.31.2 → 6.31.9 Patch PR

Closed 9 months ago 3 comments

Bump @clerk/nextjs from 6.31.4 to 6.31.9

oulla898/omani-clothing-generator-v2 #7

6.31.4 → 6.31.9 Patch PR

Open 9 months ago

⬆️(deps): Bump @clerk/nextjs from 6.31.8 to 6.31.9

marcusgoll/CFIPros-frontend #37

6.31.8 → 6.31.9 Patch PR

Open 9 months ago 1 comment

fix(deps): bump the auth group across 1 directory with 2 updates

code-craka/streamvault #43

6.31.4 → 6.31.9 Patch PR

Open 9 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.31.5 to 6.31.9

IsmaelMartinez/betis-escocia #63

6.31.5 → 6.31.9 Patch PR

Open 9 months ago 2 comments

chore: bump the npm-deps group with 27 updates

cherylfernandes07/react-nextjs-sql-auth #2

6.31.3 → 6.31.9 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.31.3 to 6.31.9

superneko160/shiori #72

6.31.3 → 6.31.9 Patch PR

Open 9 months ago 2 comments

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 15 updates

arcjet/arcjet-docs #622

6.31.2 → 6.31.9 Patch PR

Open 9 months ago

build(deps): bump @clerk/nextjs from 6.31.8 to 6.31.9

retro-board/frontend-again #195

6.31.8 → 6.31.9 Patch PR

Merged 9 months ago

Bump @clerk/nextjs from 6.31.8 to 6.31.9

timmo001/scratchpad.timmo.dev #913

6.31.8 → 6.31.9 Patch PR

Open 9 months ago 1 comment

Bump the all-pnpm-deps group with 9 updates

taichi-web-engineer/habit-log-frontend #53

6.31.6 → 6.31.9 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.31.8 to 6.31.9

bastosmichael/coder #249

6.31.8 → 6.31.9 Patch PR

Merged 9 months ago

Bump @clerk/nextjs from 6.31.8 to 6.31.9

timmo001/notes.timmo.dev #1111

6.31.8 → 6.31.9 Patch PR

Merged 9 months ago 1 comment

deps(example): bump the dependencies group across 1 directory with 3 updates

arcjet/arcjet-js #5099

6.31.6 → 6.31.9 Patch PR

Open 9 months ago 3 comments

deps(example): bump the dependencies group across 1 directory with 3 updates

arcjet/arcjet-js #5098

6.31.6 → 6.31.9 Patch PR

Open 9 months ago

fix(deps): bump @clerk/nextjs from 6.31.5 to 6.31.9

STEAMer-Academy/steamer-academy.me #112

6.31.5 → 6.31.9 Patch PR

Open 9 months ago

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 14 updates

arcjet/arcjet-docs #619

6.31.2 → 6.31.8 Patch PR

Open 10 months ago 3 comments

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 15 updates

arcjet/arcjet-docs #618

6.31.2 → 6.31.8 Patch PR

Open 10 months ago 2 comments

deps(example): bump @clerk/nextjs from 6.31.6 to 6.31.8 in /examples/nextjs-permit in the dependencies group

arcjet/arcjet-js #5086

6.31.6 → 6.31.8 Patch PR

Open 10 months ago 3 comments

deps(example): bump @clerk/nextjs from 6.31.6 to 6.31.8 in /examples/nextjs-clerk-rate-limit in the dependencies group

arcjet/arcjet-js #5084

6.31.6 → 6.31.8 Patch PR

Open 10 months ago 1 comment

deps(example): bump @clerk/nextjs from 6.31.6 to 6.31.8 in /examples/nextjs-clerk-shield in the dependencies group

arcjet/arcjet-js #5083

6.31.6 → 6.31.8 Patch PR

Open 10 months ago 3 comments

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 17 updates

arcjet/arcjet-docs #614

6.31.2 → 6.31.8 Patch PR

Closed 10 months ago 4 comments

Bump the dependencies group across 1 directory with 21 updates

RasengunShotaro/pdcxa #230

6.31.2 → 6.31.8 Patch PR

Open 10 months ago

Bump the dependencies group with 21 updates

RasengunShotaro/pdcxa #229

6.31.2 → 6.31.8 Patch PR

Open 10 months ago

chore: bump the npm-deps group across 1 directory with 27 updates

c0d3ster/c0d3ster #29

6.31.1 → 6.31.8 Patch PR

Open 10 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.31.6 to 6.31.8

bastosmichael/coder #238

6.31.6 → 6.31.8 Patch PR

Merged 10 months ago

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,484 (55.7%)

Merged 171 (6.4%)

Closed 829 (31.1%)

PR Types

Major 354 (13.3%)

Minor 1,634 (61.3%)

Patch 496 (18.6%)