Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Improper Verification Of Cryptographic Signature

🗓️ 10 Jul 2025 06:09:23Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Clerk is vulnerable to improper verification of cryptographic signature in webhook events leading to forgery.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNNVD		Official Clerk JavaScript SDKs 数据伪造问题漏洞
9 Jul 202500:00
–cnnvd
CVE		CVE-2025-53548
9 Jul 202517:12
–cve
Cvelist		CVE-2025-53548 @clerk/backend Performs Insufficient Verification of Data Authenticity
9 Jul 202517:12
–cvelist
EUVD		EUVD-2025-20865
3 Oct 202520:07
–euvd
Github Security Blog		@clerk/backend Performs Insufficient Verification of Data Authenticity
9 Jul 202518:07
–github
NVD		CVE-2025-53548
9 Jul 202518:15
–nvd
OSV		CVE-2025-53548 @clerk/backend Performs Insufficient Verification of Data Authenticity
9 Jul 202517:12
–osv
OSV		GHSA-9MP4-77WG-RWX9 @clerk/backend Performs Insufficient Verification of Data Authenticity
9 Jul 202518:07
–osv
Positive Technologies		PT-2025-28943 · Clerk · @Clerk/Backend
9 Jul 202500:00
–ptsecurity
RedhatCVE		CVE-2025-53548
11 Jul 202517:38
–redhatcve
Rows per page
Vulners
Node
fastify@clerk/fastifyRange2.9.0–2.10.1js
OR
fastify@clerk/fastifyRange2.3.0–2.4.4-snapshot.v20250707151720js
OR
remix@clerk/remixRange4.8.0–4.8.4js
OR
remix@clerk/remixRange4.8.0–4.8.5-snapshot.v20250707151720js
OR
express@clerk/expressRange1.6.0–1.7.3js
OR
express@clerk/expressRange1.6.0–1.7.4-snapshot.v20250707151720js
OR
nuxt@clerk/nuxtRange1.7.0–1.7.4js
OR
nuxt@clerk/nuxtRange1.7.0–1.7.5-snapshot.v20250707151720js
OR
tanstack-react-start@clerk/tanstack-react-startRange0.16.0–0.18.2js
OR
tanstack-react-start@clerk/tanstack-react-startRange0.16.0–0.18.3-snapshot.v20250707151720js
OR
react-router@clerk/react-routerRange1.5.0–1.6.3js
OR
react-router@clerk/react-routerRange1.5.0–1.6.4-snapshot.v20250707151720js
OR
backend@clerk/backendRange2.0.0–2.3.9js
OR
backend@clerk/backendRange2.0.0–2.4.0-snapshot.v20250707151720js
OR
astro@clerk/astroRange2.9.0–2.10.1js
OR
astro@clerk/astroRange2.9.0–2.10.2-snapshot.v20250707151720js
OR
nextjs@clerk/nextjsRange6.2.10–6.23.2js
OR
nextjs@clerk/nextjsRange6.2.10–6.23.3-snapshot.v20250707151720js

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Jun 2026 12:59Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.17.5
EPSS0.00152
SSVC
vulnerability webhook verification forgery cryptographic signature unauthorized actions
4