PT-2025-47613 · Clerk · Clerk-Js

Published 2025-11-20 · Updated 2025-11-25 · CVE-2025-63700

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Clerk-js version 5.88.0

Description An issue allows attackers to bypass the OAuth authentication flow by manipulating the request during the OTP verification stage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-63700

Affected Products

Clerk-Js

References · 10

• 🔥 https://github.com/itsnishat08/CVE-2025-63700 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63700 · Security Note
• https://npmjs.com/package/@clerk/clerk-js · Note
• https://twitter.com/CVEnew/status/1991581261563830395 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1p6brge/resumen_diario_de_vulnerabilidades_25112025 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1p5nvy1/resumen_diario_de_vulnerabilidades_24112025 · Reddit Post
• https://t.me/CVEtracker/37865 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1p5s47k/resumen_diario_de_vulnerabilidades_24112025 · Reddit Post
• https://clerk.com · Note
• https://reddit.com/r/VulnMatter/comments/1p2z55i/resumen_diario_de_vulnerabilidades_21112025 · Reddit Post