npm / @clerk/backend
@clerk/backend
What changed in @clerk/backend 3, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.
1 security4 new APIs and options1 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@clerk/backend 36 changes
Security 1
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
New APIs and options 4
Adds webhook types for transactional email delivery, delays, bounces, complaints, failures, and suppressions.
Accepts an optional issuer value to validate the JWT iss claim against a string or list of allowed strings; this applies only to session tokens. Omitting it preserves existing behavior.
Accepts an optional issuer value to validate the JWT iss claim against a string or list of allowed strings. Omitting it preserves existing behavior.
Accepts an optional issuer value to validate the JWT iss claim against a string or list of allowed strings; this applies only to session tokens. Omitting it preserves existing behavior.
Fixes and other changes 1
Preserves the original event timestamp and instance ID for outcome handlers.