`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,660 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
790 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated about 4 hours ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published about 2 months ago • updated about 21 hours ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 1 month ago • updated about 4 hours ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

Bump @clerk/nextjs from 4.26.2 to 7.5.1

bastosmichael/manager #459

4.26.2 → 7.5.1 Major PR

Closed 1 day ago 1 comment

Bump @clerk/nextjs from 4.29.3 to 7.4.2

bastosmichael/teacher #460

4.29.3 → 7.4.2 Major PR

Closed 14 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 6 updates

mselchow/seaport-client-monitor #75

6.39.2 → 7.3.7 Major PR

Open 23 days ago 2 comments

build(deps): Bump @clerk/nextjs from 5.7.6 to 7.3.7

ShAuRyA-Noodle/Honey-Chilly #24

5.7.6 → 7.3.7 Major PR

Closed 24 days ago 3 comments

build(deps): Bump @clerk/clerk-react and @clerk/nextjs

ShAuRyA-Noodle/Honey-Chilly #15

5.7.6 → 7.3.5 Major PR

Closed 26 days ago 3 comments

build(deps): bump the dependencies group across 1 directory with 60 updates

Aftab48/Haemologix #82

6.36.2 → 7.3.4 Major PR

Closed 27 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 18 directories with 8 updates

arthrod/CopilotKit #51

6.7.1 → 7.3.3 Major PR

Closed 28 days ago 3 comments

build(deps): bump @clerk/nextjs from 6.39.3 to 7.3.3

fork-commit-merge/fork-commit-merge-web #781

6.39.3 → 7.3.3 Major PR

Open about 1 month ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.3 to 7.3.3

richter83-star/Anima #7

6.39.3 → 7.3.3 Major PR

Open about 1 month ago 1 comment

Bump @clerk/nextjs from 4.26.2 to 7.3.2

bastosmichael/manager #410

4.26.2 → 7.3.2 Major PR

Closed about 1 month ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.3 to 7.3.0

medartus/crawlready-web #26

6.39.3 → 7.3.0 Major PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 20 updates

hit-sharq/vikmac-ajiralink-agency #2

6.35.5 → 7.2.8 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump @clerk/clerk-react and @clerk/nextjs

BolajiAyodeji/attraktives-headshot #25

5.7.5 → 7.2.8 Major PR

Open about 1 month ago 2 comments

chore(deps): Bump @clerk/nextjs from 6.39.3 to 7.2.7

gkeferstein/payments.mojo.neu #36

6.39.3 → 7.2.7 Major PR

Closed about 2 months ago 2 comments

NS-3: chore(deps): bump the clerk group across 1 directory with 5 updates

mmcxii/november-sierra #294

6.37.4 → 7.2.5 Major PR

Open about 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.37.3 to 7.2.3

ardacanuckan/forprompt-oss #28

6.37.3 → 7.2.3 Major PR

Closed about 2 months ago 2 comments

deps(dashboard): bump @clerk/nextjs from 6.39.2 to 7.2.3 in /apps/dashboard

AhmedAmineBejaoui/ai-code-review-platform #58

6.39.2 → 7.2.3 Major PR

Open about 2 months ago 3 comments

Bump cookie and @clerk/nextjs

aftabrehan/jarvis-ai #21

4.29.3 → 7.0.12 Major PR

Open 2 months ago 1 comment

chore(deps): Bump @clerk/nextjs from 6.36.5 to 7.0.12

nakayamaryo0731/pairbo #165

6.36.5 → 7.0.12 Major PR

Open 2 months ago 6 comments

build(deps): bump the dependencies group across 1 directory with 58 updates

Aftab48/Haemologix #79

6.36.2 → 7.0.12 Major PR

Open 2 months ago 2 comments

chore(deps): Bump the production-dependencies group across 1 directory with 26 updates

galaxy-co-ai/nerve-agent #13

6.37.1 → 7.0.12 Major PR

Open 2 months ago 1 comment

chore(deps): bump the production-dependencies group with 28 updates

gr8monk3ys/InfiniStar #24

6.37.3 → 7.0.11 Major PR

Closed 2 months ago 2 comments

Bump the major group across 1 directory with 12 updates

ahmad4376/InterviewPrepApp #21

6.37.3 → 7.0.8 Major PR

Open 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.36.5 to 7.0.8 in /web

cliff-de-tech/Post-Bot #45

6.36.5 → 7.0.8 Major PR

Open 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.1 to 7.0.8

mohitesrushti275/Antigravity #6

6.39.1 → 7.0.8 Major PR

Open 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.1 to 7.0.8

anungis437/nzila-os #275

6.39.1 → 7.0.8 Major PR

Open 2 months ago 5 comments

chore(deps): bump the major group with 7 updates

misty-step/linejam #199

6.37.5 → 7.0.7 Major PR

Open 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.1 to 7.0.7

smigolsmigol/llmkit #45

6.39.1 → 7.0.7 Major PR

Open 2 months ago 3 comments

Bump @clerk/nextjs from 6.39.0 to 7.0.7

llbbl/positivehelp #225

6.39.0 → 7.0.7 Major PR

Open 3 months ago 2 comments

ANC-132: chore(deps): bump the clerk group across 1 directory with 4 updates

mmcxii/anchr #102

6.37.4 → 7.0.7 Major PR

Closed 3 months ago 1 comment

build(deps): bump @clerk/nextjs from 5.7.5 to 6.12.8

Haven-AI-Partners/freee-expenses #14

5.7.5 → 6.12.8 Major PR

Closed 3 months ago 3 comments

chore(deps): bump @clerk/nextjs from 6.35.6 to 7.0.6

geraldbahati/my-portfolio #35

6.35.6 → 7.0.6 Major PR

Open 3 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.37.3 to 7.0.6

ardacanuckan/forprompt-oss #18

6.37.3 → 7.0.6 Major PR

Open 3 months ago 1 comment

deps: bump @clerk/nextjs from 6.39.1 to 7.0.6

csalinas-cortexnova/beat-mind-ai #16

6.39.1 → 7.0.6 Major PR

Open 3 months ago 1 comment

chore(deps): bump the clerk group with 2 updates

kaeli-byte/brainstorming #14

6.34.1 → 7.0.5 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the production-dependencies group in /apps/web with 7 updates

gr8monk3ys/blog-AI #95

6.39.0 → 7.0.5 Major PR

Open 3 months ago 2 comments

build(deps): bump @clerk/nextjs from 6.39.0 to 7.0.4

fork-commit-merge/fork-commit-merge-web #769

6.39.0 → 7.0.4 Major PR

Open 3 months ago 1 comment

build(deps): bump @clerk/nextjs from 6.39.0 to 7.0.4 in /web

Tristan578/project-forge #6637

6.39.0 → 7.0.4 Major PR

Closed 3 months ago 2 comments

build(deps): bump the dependencies group across 1 directory with 39 updates

jorgejac1/allylab #44

6.37.1 → 7.0.4 Major PR

Closed 3 months ago 2 comments

chore(root-deps)(deps): bump @clerk/nextjs from 6.38.3 to 7.0.4

arolariu/arolariu.ro #534

6.38.3 → 7.0.4 Major PR

Closed 3 months ago 3 comments

chore(web)(deps): bump @clerk/nextjs from 6.39.0 to 7.0.4 in /apps/web

planetaryescape/blah.chat #415

6.39.0 → 7.0.4 Major PR

Open 3 months ago 3 comments

Bump @clerk/nextjs from 6.39.0 to 7.0.4 in /frontend

therealkevinandtony/quickclips #16

6.39.0 → 7.0.4 Major PR

Open 3 months ago 1 comment

Bump @clerk/nextjs from 6.39.0 to 7.0.4

llbbl/positivehelp #219

6.39.0 → 7.0.4 Major PR

Closed 3 months ago 2 comments

deps: bump @clerk/nextjs from 6.39.0 to 7.0.4

csalinas-cortexnova/beat-mind-ai #10

6.39.0 → 7.0.4 Major PR

Open 3 months ago 1 comment

chore(deps): bump the production-dependencies group in /apps/web with 6 updates

gr8monk3ys/blog-AI #84

6.39.0 → 7.0.4 Major PR

Closed 3 months ago 2 comments

Bump the production-dependencies group across 1 directory with 16 updates

Vivancedata/crm #6

4.31.8 → 7.0.4 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the production-dependencies group with 11 updates

gr8monk3ys/blog-AI #81

6.38.2 → 7.0.2 Major PR

Closed 3 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.36.3 to 7.0.2

Ivhene/overwatch-statistics #684

6.36.3 → 7.0.2 Major PR

Open 3 months ago 2 comments

build(deps): bump @clerk/nextjs from 6.39.0 to 7.0.1 in /web

Tristan578/project-forge #1623

6.39.0 → 7.0.1 Major PR

Open 3 months ago 2 comments

deps(deps): bump @clerk/nextjs from 6.39.0 to 7.0.1

JSB2010/jacobbarkin.com #130

6.39.0 → 7.0.1 Major PR

Open 3 months ago 5 comments

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,480 (55.7%)

Merged 171 (6.4%)

Closed 827 (31.1%)

PR Types

Major 353 (13.3%)

Minor 1,630 (61.3%)

Patch 495 (18.6%)