# Vercel Firewall proactively protects against vulnerability in the Clerk SDK

**Published:** January 12, 2024 | **Authors:** Shohei Maeda, Aaron Brown

---

A security vulnerability in the `@clerk/nextjs` [SDK](https://clerk.com/docs/references/nextjs/overview) was identified by the Clerk team recently, which allows malicious actors to act-on-behalf-of other users.

The Clerk team has already released a patch with the latest version. Please check the [public announcement by the Clerk team](https://clerk.com/changelog/2024-01-12) for more details.

While we still recommend updating to the latest version of the Clerk SDK, Vercel has taken proactive measures on our [Firewall](https://vercel.com/docs/security/vercel-firewall) to protect our customers on all plans.

We will continue efforts to proactively protect Clerk + Next.js deployments on Vercel through the [Vercel Firewall](https://vercel.com/docs/security/vercel-firewall), regardless of Clerk's Next.js SDK version running.

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)