Middleware-based route protection bypass · Advisory · clerk/javascript · GitHub
Security AdvisoryGHSA-vqx2-fgx2-5wq9HighClerk
Affected:
- @clerk/astro >= 0.0.1, <= 2.17.9
- @clerk/astro >= 3.0.0, < 3.0.14
- @clerk/nextjs >= 5.0.0, <= 6.39.1
- @clerk/nextjs >= 7.0.0, < 7.2.0
- @clerk/nuxt >= 1.1.0, <= 1.13.27
Fixed in:
- @clerk/astro 1.5.7
- @clerk/astro 2.17.10
- @clerk/astro 3.0.15
- @clerk/nextjs 5.7.6
- @clerk/nextjs 6.39.2
参照 CVE: CVE-2026-41248 · 9.1
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。