CVE-2026-42349
Updated May 14, 2026 · PUBLISHED
Description
No description imported yet.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| astro | @clerk / astro | >= 2.0.0, <= 2.17.10 | affected |
| astro | @clerk / astro | >= 3.0.0, <= 3.0.17 | affected |
| backend | @clerk / backend | >= 2.0.0, <= 2.33.2 | affected |
| backend | @clerk / backend | >= 3.0.0, <= 3.2.13 | affected |
| chrome-extension | @clerk / chrome-extension | >= 1.3.5, <= 2.9.14 | affected |
| chrome-extension | @clerk / chrome-extension | >= 3.0.0, <= 3.1.14 | affected |
| clerk-expo | @clerk / clerk-expo | >= 2.2.11, <= 2.19.35 | affected |
| clerk-react | @clerk / clerk-react | >= 5.9.0, <= 5.61.5 | affected |
| expo | @clerk / expo | >= 3.0.0, <= 3.2.1 | affected |
| express | @clerk / express | >= 0.1.0, <= 1.7.78 | affected |
| express | @clerk / express | >= 2.0.0, <= 2.1.5 | affected |
| fastify | @clerk / fastify | >= 1.0.42, <= 2.6.30 | affected |
| fastify | @clerk / fastify | >= 3.0.0, <= 3.1.15 | affected |
| hono | @clerk / hono | >= 0.0.2, <= 0.1.15 | affected |
| javascript | clerk / javascript | >= 5.22.0, < 5.125.10 | affected |
| javascript | clerk / javascript | >= 6.0.0, < 6.7.5 | affected |
| nextjs | @clerk / nextjs | >= 6.0.0, <= 6.39.2 | affected |
| nextjs | @clerk / nextjs | >= 7.0.0, <= 7.2.3 | affected |
| nuxt | @clerk / nuxt | >= 1.0.0, <= 1.13.28 | affected |
| nuxt | @clerk / nuxt | >= 2.0.0, <= 2.2.4 | affected |
| react | @clerk / react | >= 6.0.0, <= 6.4.2 | affected |
| react-router | @clerk / react-router | >= 0.0.1, <= 2.4.12 | affected |
| react-router | @clerk / react-router | >= 3.0.0, <= 3.1.3 | affected |
| shared | @clerk / shared | >= 3.0.0, <= 3.47.4 | affected |
| shared | @clerk / shared | >= 4.0.0, <= 4.8.2 | affected |
| tanstack-react-start | @clerk / tanstack-react-start | >= 0.0.1, <= 0.29.10 | affected |
| tanstack-react-start | @clerk / tanstack-react-start | >= 1.0.0, <= 1.1.3 | affected |
| vue | @clerk / vue | >= 1.0.0, <= 1.17.20 | affected |
| vue | @clerk / vue | >= 2.0.0, <= 2.0.15 | affected |