1 matches found
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Summary createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handlers. Sessions are not compromised and no existing user can be impersonated - the bypass only affects the...
9.1CVSS5.8AI score0.00323EPSS
SaveExploits0References3Affected Software4
20