CVE-2025-53548
9 advisories.
npm/@clerk/backend CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/backend to 2.4.0 or later.
npm i @clerk/backend@2.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.4.0 | - |
Fixed versions
| 2.4.0 |
Sources
- osv: GHSA-9mp4-77wg-rwx9
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/astro CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/astro to 2.10.2 or later.
npm i @clerk/astro@2.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.9.0 | 2.10.2 | - |
Fixed versions
| 2.10.2 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/astro
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/express CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/express to 1.7.4 or later.
npm i @clerk/express@1.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.7.4 | - |
Fixed versions
| 1.7.4 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/express
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/fastify CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/fastify to 2.4.4 or later.
npm i @clerk/fastify@2.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 2.4.4 | - |
Fixed versions
| 2.4.4 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/fastify
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/nextjs CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/nextjs to 6.23.3 or later.
npm i @clerk/nextjs@6.23.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.10 | 6.23.3 | - |
Fixed versions
| 6.23.3 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/nextjs
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/nuxt CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/nuxt to 1.7.5 or later.
npm i @clerk/nuxt@1.7.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.5 | - |
Fixed versions
| 1.7.5 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/nuxt
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/react-router CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/react-router to 1.6.4 or later.
npm i @clerk/react-router@1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/react-router
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/remix CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/remix to 4.8.5 or later.
npm i @clerk/remix@4.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.8.0 | 4.8.5 | - |
Fixed versions
| 4.8.5 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/remix
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON
npm/@clerk/tanstack-react-start CVE-2025-53548: high 7.5
@clerk/backend Performs Insufficient Verification of Data Authenticity
Action: Upgrade @clerk/tanstack-react-start to 0.18.3 or later.
npm i @clerk/tanstack-react-start@0.18.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.16.0 | 0.18.3 | - |
Fixed versions
| 0.18.3 |
Sources
- osv: GHSA-9mp4-77wg-rwx9#npm/@clerk/tanstack-react-start
- https://github.com/clerk/javascript/security/advisories/GHSA-9mp4-77wg-rwx9
- https://nvd.nist.gov/vuln/detail/CVE-2025-53548
- https://github.com/clerk/javascript
CVE-2025-53548 · published · modified · JSON