Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 9:28 p.m.23 views

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

Summary createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handlers. Sessions are not compromised and no existing user can be impersonated - the bypass only affects the...

9.1CVSS5.8AI score0.00323EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder