npm/@clerk/backend CVE-2025-53548: high 7.5, EPSS 0.17%

@clerk/backend Performs Insufficient Verification of Data Authenticity

Action: Upgrade @clerk/backend to 2.4.0 or later.

npm i @clerk/backend@2.4.0

Affected

Fixed versions

Sources

• osv: GHSA-9mp4-77wg-rwx9
• https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
• https://nvd.nist.gov/vuln/detail/CVE-2025-53548
• https://github.com/clerk/javascript

CVE-2025-53548 · published 2025-07-09T18:07:40Z · modified 2025-07-09T20:15:13Z · JSON