CVE-2025-63700

CVE-2025-63700 · Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

An issue was discovered in Clerk-js 5.88.0 allowing attackers to bypass the OAuth authentication flow by manipulating the request at the OTP verification stage.

CVSS 8.7 · Alta

Publicación: 2025-11-20T21:30:32Z
Actualización: 2025-11-21T01:27:48.888394Z

Pila tecnológica: node

Productos y versiones afectados

@clerk/clerk-js npm
Intervalos de versiones afectados
- SEMVER: ≤ 5.88.0
Sin corrección publicada

Fuentes originales

https://nvd.nist.gov/vuln/detail/CVE-2025-63700
https://clerk.com
https://github.com/clerk/javascript
https://github.com/itsnishat08/CVE-2025-63700
https://osv.dev/vulnerability/GHSA-3mm3-wfpv-q85g

Comprueba tu servidor →

CVE-2025-63700 · Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

Productos y versiones afectados

@clerk/clerk-js npm

Fuentes originales