Security Advisories for @clerk/fastify in npm
High
about 1 month ago
Clerk has an authorization bypass when combining organization, billing, or reverification checks
npm
@clerk/hono, @clerk/express, @clerk/fastify, @clerk/chrome-extension, @clerk/tanstack-react-start, @clerk/react-router, @clerk/expo, @clerk/clerk-expo, @clerk/nuxt, @clerk/astro, @clerk/vue, @clerk/react, @clerk/clerk-react, @clerk/clerk-js, @clerk/nextjs, @clerk/backend, @clerk/shared
High
2 months ago
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
npm
@clerk/fastify, @clerk/hono, @clerk/express, @clerk/backend
High
11 months ago
@clerk/backend Performs Insufficient Verification of Data Authenticity
npm
@clerk/tanstack-react-start, @clerk/remix, @clerk/react-router, @clerk/nuxt, @clerk/nextjs, @clerk/fastify, @clerk/express, @clerk/astro, @clerk/backend
Potential
Critical
over 2 years ago
@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)
npm
@clerk/nextjs