CVE-2025-53548 — @clerk/backend Performs Insufficient Verification of Data Authenticity
Clerk helps developers build user management. Applications that use the verifyWebhook() helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed w…
Published: 2025-07-09 · CVSS: 7.5 · CVSS 3.1
Clerk helps developers build user management. Applications that use the verifyWebhook() helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. The issue was resolved in @clerk/backend 2.4.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7