npm/@clerk/clerk-js CVE-2025-63700: high 7.5
Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.88.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3mm3-wfpv-q85g
- https://nvd.nist.gov/vuln/detail/CVE-2025-63700
- https://clerk.com
- https://github.com/clerk/javascript
- https://github.com/itsnishat08/CVE-2025-63700
CVE-2025-63700 · published · modified · JSON