Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/16 9:28 p.m.12 views

GHSA-VQX2-FGX2-5WQ9 Official Clerk JavaScript SDKs: Middleware-based route protection bypass

Summary createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handlers. Sessions are not compromised and no existing user can be impersonated - the bypass only affects the...

9.1CVSS5.8AI score0.00323EPSS
SaveExploits0References3
Rows per page
Query Builder