`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,660 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
790 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated about 13 hours ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published about 2 months ago • updated 1 day ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 1 month ago • updated about 13 hours ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

Recent PRs (filtered by: Minor PRs )

RSS Feed Clear filter

Bump the production-dependencies group across 1 directory with 12 updates

RafeyR17/heartimate #9

7.3.5 → 7.4.3 Minor PR

Open 4 days ago 1 comment

build(deps): bump @clerk/nextjs from 7.3.5 to 7.4.3

bjrump/CarCheck #236

7.3.5 → 7.4.3 Minor PR

Open 5 days ago 1 comment

chore(deps): bump the minor-patch group with 21 updates

solana-foundation/solana-developer-platform #381

7.3.7 → 7.4.1 Minor PR

Open 11 days ago 1 comment

chore(deps): bump the production-minor-patch group across 1 directory with 23 updates

cipherstash/stack #499

7.3.5 → 7.4.1 Minor PR

Open 11 days ago 2 comments

deps: bump the production-dependencies group across 1 directory with 12 updates

crewcircle/crewRoster #66

7.3.3 → 7.4.2 Minor PR

Open 12 days ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 27 updates

maxd4/CleanmyMap #68

7.3.1 → 7.4.2 Minor PR

Open 12 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 36 updates

jay-sahnan/signal #27

7.2.7 → 7.4.1 Minor PR

Open 17 days ago 2 comments

chore(deps)(deps): bump the npm-production-minor-patch group across 1 directory with 8 updates

lspassos1/aframe-kingspan-local #324

7.3.3 → 7.4.1 Minor PR

Open 19 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates

Clawdi-AI/clawdi #126

7.2.7 → 7.4.1 Minor PR

Open 19 days ago 1 comment

deps(dashboard): bump the npm-minor group across 1 directory with 23 updates

AhmedAmineBejaoui/ai-code-review-platform #93

7.2.3 → 7.4.0 Minor PR

Open 21 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates

Clawdi-AI/clawdi #106

7.2.7 → 7.3.7 Minor PR

Closed 23 days ago 2 comments

chore(deps): bump the pnpm-minor-patch group across 1 directory with 48 updates

mewisme/linky #106

7.2.3 → 7.3.7 Minor PR

Closed 23 days ago 1 comment

chore: Bump the npm-deps group with 55 updates

eduardo-dangelo/vintera #3

6.32.2 → 6.39.3 Minor PR

Closed 24 days ago 1 comment

chore(deps): bump the node-dependencies group across 1 directory with 20 updates

Francescosommellaa/Qoovex #10

7.2.1 → 7.3.4 Minor PR

Open 24 days ago 2 comments

chore(deps): bump the prod-minor group across 1 directory with 16 updates

GustavoAU/contaflow #21

7.2.8 → 7.3.7 Minor PR

Open 24 days ago 1 comment

deps(dashboard): bump the npm-minor group in /apps/dashboard with 18 updates

ai-code-review-2026/backend #12

7.2.3 → 7.3.5 Minor PR

Closed 26 days ago 2 comments

chore(deps): bump the prod-minor group across 1 directory with 15 updates

GustavoAU/contaflow #19

7.2.8 → 7.3.3 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

evantaylaz-cyber/salesblitz-app #4

7.1.0 → 7.2.1 Minor PR

Closed about 1 month ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 13 updates

raahulrahl/saathi #17

7.2.2 → 7.3.3 Minor PR

Open about 1 month ago 1 comment

deps(deps): bump the production-dependencies group across 1 directory with 8 updates

JSB2010/jacobbarkin.com #170

7.2.7 → 7.3.3 Minor PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

GlacierEQ/supabase #76

6.18.2 → 6.39.2 Minor PR

Open about 1 month ago 7 comments

chore(deps)(deps): bump the npm-minor-and-patch group across 1 directory with 22 updates

joshhair/kilo-energy #22

7.0.8 → 7.3.3 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the pnpm-minor-patch group across 1 directory with 40 updates

mewisme/linky #89

7.2.3 → 7.3.3 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 21 updates

michellepace/devflow #54

7.0.12 → 7.3.3 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 18 directories with 10 updates

arthrod/CopilotKit #44

6.7.1 → 6.39.3 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump @clerk/nextjs from 7.2.3 to 7.3.2

kapsarovL/e-commerce-nextjs16 #63

7.2.3 → 7.3.2 Minor PR

Closed about 1 month ago 2 comments

deps(dashboard): bump the npm-minor group across 1 directory with 17 updates

AhmedAmineBejaoui/ai-code-review-platform #79

7.2.3 → 7.3.2 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 32 directories with 6 updates

GlacierEQ/CopilotKit #223

6.27.1 → 6.39.2 Minor PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 19 directories with 6 updates

c6ai/CopilotKit #143

6.7.1 → 6.39.3 Minor PR

Closed about 1 month ago 1 comment

deps(dashboard): bump the npm-minor group across 1 directory with 9 updates

AhmedAmineBejaoui/ai-code-review-platform #78

7.2.3 → 7.3.1 Minor PR

Closed about 1 month ago 3 comments

build(deps): bump @clerk/nextjs from 7.2.7 to 7.3.0 in /frontend

quikspitboise/quikspit-web #120

7.2.7 → 7.3.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates

jay-sahnan/signal #23

7.2.7 → 7.3.0 Minor PR

Closed about 1 month ago 3 comments

deps(deps): bump the production-dependencies group with 3 updates

JSB2010/jacobbarkin.com #165

7.2.7 → 7.3.0 Minor PR

Open about 1 month ago 3 comments

chore(deps): bump the all-minor-and-patch group across 1 directory with 18 updates

IsmaelMartinez/betis-escocia #412

7.2.5 → 7.3.0 Minor PR

Closed about 1 month ago 3 comments

deps: bump the production-dependencies group with 4 updates

crewcircle/crewRoster #50

7.2.9 → 7.3.0 Minor PR

Closed about 1 month ago 2 comments

build(deps): bump the security-updates group across 1 directory with 8 updates

sethwilsonUS/world-garden #104

7.0.4 → 7.2.1 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump the production-minor-patch group with 7 updates

sethwilsonUS/world-garden #100

7.0.4 → 7.3.0 Minor PR

Open about 1 month ago 1 comment

build(deps): bump @clerk/nextjs from 7.0.4 to 7.2.4

sethwilsonUS/world-garden #97

7.0.4 → 7.2.4 Minor PR

Open about 1 month ago 1 comment

Bump @clerk/nextjs from 6.37.1 to 6.39.3

sethwilsonUS/a11y-garden #51

6.37.1 → 6.39.3 Minor PR

Open about 1 month ago 2 comments

Bump @clerk/nextjs from 6.36.5 to 6.39.3

THEFZNKHAN/next-docs #9

6.36.5 → 6.39.3 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 18 updates

michellepace/devflow #53

7.0.12 → 7.3.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 18 updates

maxd4/CleanmyMap #37

7.2.1 → 7.3.0 Minor PR

Open about 1 month ago 2 comments

build(deps): bump @clerk/nextjs from 7.2.9 to 7.3.0 in the clerk group

minesokim/child-docket #6

7.2.9 → 7.3.0 Minor PR

Open about 1 month ago 2 comments

chore: bump the npm-deps group with 3 updates

ixartz/Next-js-Boilerplate #553

7.2.9 → 7.3.0 Minor PR

Closed about 1 month ago 2 comments

chore: bump the npm-deps group across 1 directory with 59 updates

Ruitervanderley/rtec-landing #9

6.37.1 → 6.39.3 Minor PR

Open about 1 month ago 3 comments

chore: bump the npm-deps group across 1 directory with 43 updates

Yac0z/speeddy #3

7.0.6 → 7.2.9 Minor PR

Open about 1 month ago 1 comment

Bump @clerk/nextjs from 7.0.11 to 7.2.9

dougdrysdale-katogen/katogen-engine #17

7.0.11 → 7.2.9 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 10 updates

314systems/opennextjs-cloudflare #10

6.9.6 → 6.39.3 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

saytyarnorngloreia/codemod #13

6.10.0 → 6.39.3 Minor PR

Closed about 1 month ago 1 comment

Bump @clerk/nextjs from 6.37.3 to 6.39.3

vascohq/cycles #25

6.37.3 → 6.39.3 Minor PR

Open about 1 month ago 1 comment

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,480 (55.6%)

Merged 171 (6.4%)

Closed 828 (31.1%)

PR Types

Major 354 (13.3%)

Minor 1,630 (61.3%)

Patch 495 (18.6%)