@clerk/shared vulnerabilities (npm)

2 vulnerabilities.

• @clerk/shared npm Clerk: Authorization bypass when combining organization, billing, or reverification checks CVE-2026-42349 Fix available 7.6 HighApril 30, 2026
• @clerk/shared npm Official Clerk JavaScript SDKs: Middleware-based route protection bypass CVE-2026-41248 Fix available 9.1 CriticalApril 16, 2026