@clerk/backend Performs Insufficient Verification of Data Authenticity
Applications that use the verifyWebhook() helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events.
Advisories for Npm/@Clerk/Tanstack-React-Start package
2025