{"id":"EUVD-2026-25632","enisaUuid":"7f246494-094f-30f9-9d09-c77ab9ea14a5","description":"Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handlers. This vulnerability is fixed in @clerk/astro 1.5.7, 2.17.10, and 3.0.15; @clerk/nextjs 5.7.6, 6.39.2, and 7.2.1; @clerk/nuxt 1.13.28 and 2.2.2; and @clerk/shared 2.22.1, 3.47.4, anc 4.8.1","datePublished":"Apr 24, 2026, 9:04:35 PM","dateUpdated":"Apr 27, 2026, 1:46:28 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/clerk/javascript/security/advisories/GHSA-vqx2-fgx2-5wq9\n","aliases":"CVE-2026-41248\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"085f5e3f-4732-387a-8b68-626a34a1d256","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"3.0.0-canary.v20250225091530, \u003c 3.47.4"},{"id":"5589524c-d70a-303c-867a-d3e7d2f9289e","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"3.0.0, \u003c 3.0.15"},{"id":"5bf90971-b447-3165-8a6e-47f43249c8ff","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"6.0.0-snapshot.vb87a27f, \u003c 6.39.2"},{"id":"9b332fc3-e99a-30eb-8b4e-1219d2ee47c0","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"0.0.1, \u003c 1.5.7"},{"id":"a6257a89-ba8b-3d07-8b3c-abb9d4afc9b6","product":{"name":"nuxt","vendor":{"name":"@clerk"}},"product_version":"1.1.0, \u003c 1.13.28"},{"id":"ba427fdc-3c38-3c4f-b281-9978ee7a37f6","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"4.0.0, \u003c 4.8.1"},{"id":"d83da47e-27a5-34f0-8c5b-783b09c2491c","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"2.20.17, \u003c 2.22.1"},{"id":"dd1c3649-1981-3185-87d1-0c30425e71d9","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"2.0.0-snapshot.v20241206174604, ≤ 2.17.9"},{"id":"e6d9dde6-0e68-3771-830f-232c83f3d78e","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"7.0.0, \u003c 7.2.1"},{"id":"e78211d7-53d8-37c4-ba3d-1db7cbdd313a","product":{"name":"nuxt","vendor":{"name":"@clerk"}},"product_version":"2.0.0, \u003c 2.2.2"},{"id":"e797e4b4-95d8-35ea-a971-ba0e0d410543","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"5.0.0, \u003c 5.7.6"}],"enisaIdVendor":[{"id":"168701c2-b3e0-3146-a290-093b160363c3","vendor":{"name":"clerk"}}],"enisaIdVulnerability":[{"id":"8122b909-fa8c-3ea7-be90-efd1eaee3429","vulnerability":{"id":"CVE-2026-41248","description":"Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowing them to skip middleware gating and reach downstream handlers. This vulnerability is fixed in @clerk/astro 1.5.7, 2.17.10, and 3.0.15; @clerk/nextjs 5.7.6, 6.39.2, and 7.2.1; @clerk/nuxt 1.13.28 and 2.2.2; and @clerk/shared 2.22.1, 3.47.4, anc 4.8.1","datePublished":"Apr 24, 2026, 9:04:35 PM","dateUpdated":"Apr 27, 2026, 1:46:28 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/clerk/javascript/security/advisories/GHSA-vqx2-fgx2-5wq9\n","enisa_id":"EUVD-2026-25632\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Oct 27, 2026, 7:17:29 AM","vulnerabilityProduct":[{"id":"32f88ea5-8c40-3b4f-ab6f-737088ea1e98","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"0.0.1, \u003c 1.5.7"},{"id":"416a54e3-011f-3af4-8146-4c78a7adb8f5","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"6.0.0-snapshot.vb87a27f, \u003c 6.39.2"},{"id":"6d49e8fb-75ad-32ce-99f3-d44af886a63e","product":{"name":"nuxt","vendor":{"name":"@clerk"}},"product_version":"2.0.0, \u003c 2.2.2"},{"id":"84e12bf6-c85c-36b2-a494-9f5f95ca2f30","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"4.0.0, \u003c 4.8.1"},{"id":"9ae87149-3ce4-3b26-ab34-49ecd3e1125f","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"3.0.0-canary.v20250225091530, \u003c 3.47.4"},{"id":"ab43835f-cda4-30e9-9548-dff95fb751e1","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"7.0.0, \u003c 7.2.1"},{"id":"b1ca01eb-447c-3730-80cb-2b0fad1d06c3","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"3.0.0, \u003c 3.0.15"},{"id":"b4ccedb3-2f48-3cbf-8311-da4749bda8eb","product":{"name":"shared","vendor":{"name":"@clerk"}},"product_version":"2.20.17, \u003c 2.22.1"},{"id":"c932ad01-abfa-3e39-8dd7-7292350f0033","product":{"name":"nuxt","vendor":{"name":"@clerk"}},"product_version":"1.1.0, \u003c 1.13.28"},{"id":"de2396df-df91-3a01-bc79-add9e9d2c075","product":{"name":"astro","vendor":{"name":"withastro"}},"product_version":"2.0.0-snapshot.v20241206174604, ≤ 2.17.9"},{"id":"ff1266b6-dbac-3048-82ad-f41b1af47a17","product":{"name":"nextjs","vendor":{"name":"@clerk"}},"product_version":"5.0.0, \u003c 5.7.6"}],"vulnerabilityVendor":[{"id":"eb1a1360-063c-3b6a-a1fa-3373f9ce8d07","vendor":{"name":"clerk"}}]}}],"enisaIdAdvisory":[]}