`@clerk/nextjs`

Ecosystem:
npm

Package URL:
pkg:npm/@clerk/nextjs

Total PRs:
2,659 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
790 repositories

Unique Repos (30 days):
40 repositories

Security Advisories

@clerk/backend Performs Insufficient Verification of Data Authenticity

GHSA-9mp4-77wg-rwx9 CVE-2025-53548 HIGH published 11 months ago • updated about 6 hours ago

### Impact Applications that use the `verifyWebhook()` helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed web...

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

GHSA-q6w5-jg5q-47vg CVE-2024-22206 CRITICAL published over 2 years ago • updated about 1 month ago

### Impact Unauthorized access or privilege escalation due to a logic flaw in `auth()` in the App Router or `getAuth()` in the Pages Router. ### A...

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

GHSA-vqx2-fgx2-5wq9 CVE-2026-41248 CRITICAL published about 2 months ago • updated about 9 hours ago

## Summary `createRouteMatcher` in `@clerk/nextjs`, `@clerk/nuxt`, and `@clerk/astro` can be bypassed by certain crafted requests, allowing them t...

Clerk has an authorization bypass when combining organization, billing, or reverification checks

GHSA-w24r-5266-9c3c CVE-2026-42349 HIGH published about 1 month ago • updated about 9 hours ago

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@clerk/backend`, and other frame...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): Bump the production-dependencies group across 1 directory with 3 updates

abarva-platform/abarva #3009

7.4.2 → 7.4.3 Patch PR

Open 7 days ago 9 comments

build(deps): bump the npm_and_yarn group across 4 directories with 3 updates

lwhite702/DRX_Primary #91

6.39.1 → 6.39.3 Patch PR

Open 10 days ago 3 comments

build(deps): bump the npm_and_yarn group across 3 directories with 4 updates

lwhite702/DRX_Primary #90

6.39.1 → 6.39.3 Patch PR

Open 10 days ago 3 comments

chore: bump the npm-deps group with 16 updates

Naman830/Toolsmeen #1

7.4.0 → 7.4.2 Patch PR

Closed 11 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates

lwhite702/DRX_Primary #88

6.39.1 → 6.39.2 Patch PR

Open 14 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates

lwhite702/DRX_Primary #87

6.39.1 → 6.39.2 Patch PR

Closed 14 days ago 4 comments

chore(deps): bump @clerk/nextjs from 7.4.0 to 7.4.1 in the version group

STEAMer-Academy/steamer-academy.me #369

7.4.0 → 7.4.1 Patch PR

Open 17 days ago 2 comments

Bump the npm-minor-patch group with 6 updates

alinafe82/crownbooked #6

7.3.3 → 7.3.7 Patch PR

Closed 23 days ago 1 comment

deps(deps): bump the production-dependencies group with 5 updates

JSB2010/jacobbarkin.com #175

7.3.3 → 7.3.7 Patch PR

Open 23 days ago 3 comments

chore(deps)(deps): bump the npm-minor-and-patch group across 1 directory with 15 updates

joshhair/kilo-energy #37

7.3.3 → 7.3.5 Patch PR

Open 24 days ago 2 comments

chore: bump @clerk/nextjs from 5.7.5 to 5.7.6

lxw15337674/NotionNext #16

5.7.5 → 5.7.6 Patch PR

Open 24 days ago 2 comments

deps(deps): Bump the minor-and-patch group across 1 directory with 13 updates

DanielOpazoD/TaotePOCUS #53

7.3.0 → 7.3.3 Patch PR

Closed about 1 month ago 5 comments

chore(deps): bump @clerk/nextjs from 7.2.3 to 7.2.4

kapsarovL/e-commerce-nextjs16 #90

7.2.3 → 7.2.4 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump @clerk/nextjs from 7.3.0 to 7.3.3 in the auth-clerk-stack group

MarcSaad-Hadidi/Trouvable #71

7.3.0 → 7.3.3 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump @clerk/nextjs from 7.3.0 to 7.3.3

IsmaelMartinez/bonnie-wee-plot #357

7.3.0 → 7.3.3 Patch PR

Open about 1 month ago 1 comment

deps(deps): Bump the production-minor-patch group across 1 directory with 16 updates

RJO1st/LP #15

7.3.1 → 7.3.3 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the production-dependencies group with 6 updates

ot-nemoto/daily-hub #190

7.3.0 → 7.3.3 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the dependencies group with 12 updates

maxd4/CleanmyMap #52

7.3.1 → 7.3.3 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the version group across 1 directory with 13 updates

STEAMer-Academy/steamer-academy.me #360

7.3.1 → 7.3.3 Patch PR

Open about 1 month ago 5 comments

chore(deps): bump @clerk/nextjs from 7.3.2 to 7.3.3

medartus/crawlready-web #39

7.3.2 → 7.3.3 Patch PR

Closed about 1 month ago 3 comments

deps(deps): Bump the production-minor-patch group with 13 updates

RJO1st/LP #6

7.3.1 → 7.3.2 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 17 updates

Drewyoung910/grainline #7

7.3.0 → 7.3.1 Patch PR

Open about 1 month ago 2 comments

Bump @clerk/nextjs from 7.2.3 to 7.2.4 in /web

vineet-reddy/agentscience #11

7.2.3 → 7.2.4 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @clerk/nextjs from 5.7.5 to 5.7.6

expoli/NotionNext #67

5.7.5 → 5.7.6 Patch PR

Open about 1 month ago 1 comment

chore: bump the npm-deps group with 15 updates

ixartz/Next-js-Boilerplate #552

7.2.7 → 7.2.9 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the all-minor-and-patch group across 1 directory with 15 updates

IsmaelMartinez/betis-escocia #406

7.2.5 → 7.2.9 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.2 to 6.39.3

bldragon101/worklog #202

6.39.2 → 6.39.3 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.2 to 6.39.3

JeczzuDev/pov-ia-minigame #22

6.39.2 → 6.39.3 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the studio-minor-and-patch group across 1 directory with 3 updates

paperwork-labs/paperwork #465

7.2.7 → 7.2.8 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump @clerk/nextjs from 7.2.5 to 7.2.8

sanidhyy/duolingo-clone #112

7.2.5 → 7.2.8 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the version group across 1 directory with 4 updates

STEAMer-Academy/steamer-academy.me #352

7.2.5 → 7.2.7 Patch PR

Open about 1 month ago 2 comments

build(deps): bump the npm group across 1 directory with 16 updates

gikl-ai/scienceswarm #439

7.2.3 → 7.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the production-dependencies group with 4 updates

blparker/vizzy #17

7.2.3 → 7.2.7 Patch PR

Closed about 2 months ago 2 comments

deps(dashboard): bump the npm-minor group across 1 directory with 7 updates

AhmedAmineBejaoui/ai-code-review-platform #75

7.2.3 → 7.2.7 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

dnlortega/financeai #2

5.7.5 → 5.7.6 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 17 updates

dnlortega/financeai #1

5.7.5 → 5.7.6 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the pnpm-minor-patch group across 1 directory with 26 updates

mewisme/linky #71

7.2.3 → 7.2.5 Patch PR

Closed about 2 months ago 2 comments

deps(dashboard): bump the npm-minor group in /apps/dashboard with 6 updates

AhmedAmineBejaoui/ai-code-review-platform #67

7.2.3 → 7.2.5 Patch PR

Open about 2 months ago 3 comments

Bump @clerk/nextjs from 5.7.2 to 5.7.6

GitDaksh/visualvibe #17

5.7.2 → 5.7.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

emilwalter/f1-picks #41

6.39.1 → 6.39.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 5.7.5 to 5.7.6

martinbolsnes/recipe-app #9

5.7.5 → 5.7.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.0 to 6.39.2 in /apps/app

f-campana/fodmapp #362

6.39.0 → 6.39.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.1 to 6.39.2

emilwalter/f1-picks #40

6.39.1 → 6.39.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.0 to 6.39.2

HeimNad/TheMNHWebsite #20

6.39.0 → 6.39.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

415geek/contractor-go-v2 #23

6.39.0 → 6.39.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.1 to 6.39.2 in /turbo

vm0-ai/vm0 #9705

6.39.1 → 6.39.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @clerk/nextjs from 6.39.1 to 6.39.2

millbj92/EidolonDB #23

6.39.1 → 6.39.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump @clerk/nextjs from 6.39.1 to 6.39.2 in the npm_and_yarn group across 1 directory

romerodiesan/insurance-tenant #1

6.39.1 → 6.39.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 5.7.5 to 5.7.6

a-rustacean/chat #81

5.7.5 → 5.7.6 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @clerk/nextjs from 6.39.0 to 6.39.2

GrayGhostDev/Midway_Cleaning_app #109

6.39.0 → 6.39.2 Patch PR

Open about 2 months ago 5 comments

Package Details

Name:	`@clerk/nextjs`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@clerk/nextjs`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 2

HIGH 2

View All npm Advisories

Package Information

Description:

Clerk SDK for NextJS

Repository:	https://github.com/clerk/javascript
Homepage:	https://clerk.com/
Latest Release:	`6.5.1` over 1 year ago
Dependent Repos:	4,066
Dependent Packages:	10
Downloads:	743,795
Ranking:	Top 0.3739% by dependent repos Top 0.5141% by downloads Top 5.8022% by dependent pkgs

PR Status

Open 1,480 (55.7%)

Merged 171 (6.4%)

Closed 827 (31.1%)

PR Types

Major 353 (13.3%)

Minor 1,630 (61.3%)

Patch 495 (18.6%)