pkg:npm/@clerk/clerk-js

所有已知漏洞

• HIGH8.1CVE-2026-42349Clerk has an authorization bypass when combining organization, billing, or reverification checks
  >= 5.22.0, < 5.125.10
• HIGH7.5CVE-2025-63700Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage
  from 0, <= 5.88.0