@clerk/hono vulnerabilities (npm)

2 vulnerabilities.

• @clerk/hono npm Clerk: Authorization bypass when combining organization, billing, or reverification checks CVE-2026-42349 Fix available 7.6 HighApril 30, 2026
• @clerk/hono npm Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host CVE-2026-34076 Fix available 7.4 HighMarch 27, 2026