CVE-2025-63700

✕ Withdrawn — historical dataMEDIUMPre-NVD 7.5
7.5CVSS

Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

An issue was discovered in Clerk-js 5.88.0 allowing attackers to bypass the OAuth authentication flow by manipulating the request at the OTP verification stage.

CVSS v3
7.5
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

November 20, 2025

Last Modified

November 20, 2025

Frequently asked(4)

What is CVE-2025-63700?
CVE-2025-63700 is a rejected CVE ID: its record was withdrawn on December 23, 2025 and no longer describes a vulnerability. Reason given: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
When was the CVE record for CVE-2025-63700 published?
The CVE record for CVE-2025-63700 was published on November 20, 2025. EchelonGraph's copy of the record carries a last-modified date of November 20, 2025; the record at its source may have been updated since.
What is the CVSS score of CVE-2025-63700?
CVE-2025-63700 has a CVSS base score of 7.5 (the CNA's own assessment, by github_m; NVD's own analysis pending).
How do I remediate CVE-2025-63700?
There is nothing to remediate under CVE-2025-63700: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.