@clerk/hono

0.1.92 · 21 Oct 2026MIT39.3k / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @clerk/hono. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	0.1.92	Safe from 0.1.16
	0.0.3	1 open advisory, worst high

Your version

High
Clerk has an authorization bypass when combining organization, billing, or reverification checksGHSA-w24r-5266-9c3c · 30 Apr 2026
- 0.1.x0.1.0 – 0.1.15Fixed in 0.1.16
- 0.0.x0.0.2 – 0.0.3No fix on 0.0.x · move to 0.1.16
High
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended hostGHSA-gjxx-92w9-8v8f · 27 Mar 2026
- 0.1.x0.1.0 – 0.1.4Fixed in 0.1.5

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 23 Oct 2026. Releases and advisories last read 23 Oct 2026.