astro vulnerabilities

2 known vulnerabilities in astro from Clerk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  javascript: Improper Check for Unusual or Exceptional Conditions

  CVE-2026-42349May 11, 2026Clerk

  Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other framework SDKs can return true for certain combined authoriz

• 9.1 Critical severity

  astro: Interpretation Conflict

  CVE-2026-41248Apr 24, 2026Clerk

  Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handle