CVE-2025-63700

CVE-2025-63700 · Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

An issue was discovered in Clerk-js 5.88.0 allowing attackers to bypass the OAuth authentication flow by manipulating the request at the OTP verification stage.

CVSS 8.7 · Élevée

Publication: 2025-11-20T21:30:32Z
Mise à jour: 2025-11-21T01:27:48.888394Z

Pile logicielle: node

Produits et versions concernés

@clerk/clerk-js npm
Plages de versions concernées
- SEMVER: ≤ 5.88.0
Aucun correctif publié

Sources originales

https://nvd.nist.gov/vuln/detail/CVE-2025-63700
https://clerk.com
https://github.com/clerk/javascript
https://github.com/itsnishat08/CVE-2025-63700
https://osv.dev/vulnerability/GHSA-3mm3-wfpv-q85g

Vérifiez votre serveur →

CVE-2025-63700 · Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

Produits et versions concernés

@clerk/clerk-js npm

Sources originales