@clerk/nextjs@7.3.5
Patch Changes
-
Bump
nextdevDependency to15.5.18to pick up the fix for GHSA-26hh-7cqf-hhc6, a high-severity (CVSS 7.5) Middleware/Proxy bypass in App Router applications via segment-prefetch routes (incomplete-fix follow-up). If you use the Next.js App Router, we recommend upgrading to Next.js15.5.18,16.2.6, or a later patched release. The16.0.0through16.2.5versions are still affected. (#8547) by @jacekradko -
Updated dependencies [
9fa6642,930047f,b45777c,5441d86,5a7225e]:- @clerk/shared@4.12.0
- @clerk/react@6.6.4
- @clerk/backend@3.4.9
Fetched May 16, 2026

