| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:ddb8a395-680b-fbd0-77b9-5c9f4f2e1300 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 914A:52BC4:616AF2:880D86:6AF9C422 |
| html-safe-nonce | 0df11f8f2b0b91c38450c2db60515bafc44a68e268c6756719cf600c4d31ec51 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5MTRBOjUyQkM0OjYxNkFGMjo4ODBEODY6NkFGOUM0MjIiLCJ2aXNpdG9yX2lkIjoiNzU0MDAzNDA0MzA2MDUzNjM1NCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | f25c5cbd22fcafcd13821f99ffc603b3f7bbec6dd45b288793ac4c032054f902 |
| hovercard-subject-tag | pull_request:4506800223 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/clerk/javascript/9723/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/275d7bc351bf9a1f4d3fd6ea26288bff852a6a0a8188c3daee749e3ac1653ff8/clerk/javascript/pull/9723 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/275d7bc351bf9a1f4d3fd6ea26288bff852a6a0a8188c3daee749e3ac1653ff8/clerk/javascript/pull/9723 |
| og:image:alt | Description
middleware-storage.ts exported a single module-global Map that every AsyncLocalStorage.run() in clerkMiddleware was handed, so the store provided no per-request isolation and its single... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | dominic-clerk |
| hostname | github.com |
| expected-hostname | github.com |
| None | 612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7 |
| turbo-cache-control | no-cache |
| go-import | github.com/clerk/javascript git https://github.com/clerk/javascript.git |
| octolytics-dimension-user_id | 49538330 |
| octolytics-dimension-user_login | clerk |
| octolytics-dimension-repository_id | 438331492 |
| octolytics-dimension-repository_nwo | clerk/javascript |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 438331492 |
| octolytics-dimension-repository_network_root_nwo | clerk/javascript |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 072e34035c13c31543fba9f025cbbbda4210dae4 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| react-app-name | pull-requests |
| Skip to content | https://github.com/clerk/javascript/pull/9723#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fclerk%2Fjavascript%2Fpull%2F9723 |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects, and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fclerk%2Fjavascript%2Fpull%2F9723 |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=clerk%2Fjavascript |
| Reload | https://github.com/clerk/javascript/pull/9723 |
| Reload | https://github.com/clerk/javascript/pull/9723 |
| Reload | https://github.com/clerk/javascript/pull/9723 |
| clerk | https://github.com/clerk |
| javascript | https://github.com/clerk/javascript |
| Code | https://github.com/clerk/javascript |
| Issues44 (44) | https://github.com/clerk/javascript/issues |
| Pull requests109 (109) | https://github.com/clerk/javascript/pulls |
| Discussions | https://github.com/clerk/javascript/discussions |
| Actions | https://github.com/clerk/javascript/actions |
| Security and quality6 (6) | https://github.com/clerk/javascript/security |
| Insights | https://github.com/clerk/javascript/pulse |
| https://github.com/clerk/javascript |
| dominic-clerk | https://github.com/dominic-clerk |
| main | https://github.com/clerk/javascript/tree/main |
| dominic/sec-366-cross-request-credential-confusion-in-clerknextjs-middleware | https://github.com/clerk/javascript/tree/dominic/sec-366-cross-request-credential-confusion-in-clerknextjs-middleware |
| Conversation | https://github.com/clerk/javascript/pull/9723 |
| Commits1 (1) | https://github.com/clerk/javascript/pull/9723/commits |
| Checks | https://github.com/clerk/javascript/pull/9723/checks |
| Files changed | https://github.com/clerk/javascript/pull/9723/files |
| fix(nextjs): isolate middleware request data per request | https://github.com/clerk/javascript/pull/9723#top |
| dominic-clerk | https://github.com/dominic-clerk |
| main | https://github.com/clerk/javascript/tree/main |
| dominic/sec-366-cross-request-credential-confusion-in-clerknextjs-middleware | https://github.com/clerk/javascript/tree/dominic/sec-366-cross-request-credential-confusion-in-clerknextjs-middleware |
|
| https://github.com/dominic-clerk |
| dominic-clerk | https://github.com/dominic-clerk |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issue-5425462800 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| JSDoc comments | https://jsdoc.app/about-getting-started.html |
| Documentation | https://github.com/clerk/clerk-docs |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/apps/vercel |
| vercel | https://github.com/apps/vercel |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issuecomment-5635958021 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| Vercel for GitHub | https://vercel.link/github-learn-more |
| https://vercel.com/clerk-production/clerk-js-sandbox |
| clerk-js-sandbox | https://vercel.com/clerk-production/clerk-js-sandbox |
| https://camo.githubusercontent.com/833ba95642364322d56bfc6cc95692affdd7a5a6ca7b50fdcc44aa7e47372d3b/68747470733a2f2f76657263656c2e636f6d2f7374617469632f7374617475732f72656164792e737667 |
| Ready | https://vercel.com/clerk-production/clerk-js-sandbox/BKQwjkVjoetmhqfv9iwAy7uY8zua |
| Preview | https://clerk-js-sandbox-git-dominic-sec-366-cross-request-crede-a7c961.clerkstage.dev |
| https://vercel.com/clerk-production/swingset |
| swingset | https://vercel.com/clerk-production/swingset |
| https://camo.githubusercontent.com/833ba95642364322d56bfc6cc95692affdd7a5a6ca7b50fdcc44aa7e47372d3b/68747470733a2f2f76657263656c2e636f6d2f7374617469632f7374617475732f72656164792e737667 |
| Ready | https://vercel.com/clerk-production/swingset/3sfEr6yCcb5pxK6JTU3wzL5XBRkk |
| Preview | https://swingset-git-dominic-sec-366-cross-request-credential-co-14e204.clerkstage.dev |
| https://vercel.com/vercel-agent/request-review?owner=clerk&repo=javascript&pr=9723 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/apps/changeset-bot |
| changeset-bot | https://github.com/apps/changeset-bot |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issuecomment-5635958703 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| 81a1ca2 | https://github.com/clerk/javascript/commit/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| Click here to learn what changesets are | https://changesets.dev/faq |
| Click here if you're a maintainer who wants to add another changeset to this PR | https://github.com/clerk/javascript/new/dominic/sec-366-cross-request-credential-confusion-in-clerknextjs-middleware?filename=.changeset/fair-beans-hide.md&value=---%0A%22%40clerk%2Fnextjs%22%3A%20patch%0A---%0A%0Afix(nextjs)%3A%20isolate%20middleware%20request%20data%20per%20request%0A |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/apps/coderabbitai |
| coderabbitai | https://github.com/apps/coderabbitai |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issuecomment-5635960630 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://app.coderabbit.ai/change-stack/clerk/javascript/pull/9723#gh-light-mode-only |
| https://app.coderabbit.ai/change-stack/clerk/javascript/pull/9723#gh-dark-mode-only |
| 98e7d0a | https://github.com/clerk/javascript/commit/98e7d0a67f907546b5a64a71c7631105b78df39f |
| b8f32f4 | https://github.com/clerk/javascript/commit/b8f32f4b27eeb21327b67927e0320fbecefc22af |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/dominic-clerk |
| dominic-clerk | https://github.com/dominic-clerk |
| wobsoriano | https://github.com/wobsoriano |
| September 11, 2026 14:28 | https://github.com/clerk/javascript/pull/9723#event-30978200822 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
nextjs
| https://github.com/clerk/javascript/issues?q=state%3Aopen%20label%3Anextjs |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#event-30978202073 |
| https://github.com/apps/pkg-pr-new |
| pkg-pr-new | https://github.com/apps/pkg-pr-new |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issuecomment-5635983501 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| Open in StackBlitz | https://pkg.pr.new/template/d57fbac7-ee29-4fac-994b-f5c275996e6b |
| 81a1ca2 | https://github.com/clerk/javascript/runs/103963218425 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
| Sep 11, 2026 | https://github.com/clerk/javascript/pull/9723#issuecomment-5635995280 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| Break Check | https://github.com/clerk/break-check |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
|
| https://github.com/dominic-clerk |
|
| https://github.com/claude |
| fix(nextjs): isolate middleware request data per request | https://github.com/clerk/javascript/pull/9723/commits/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| 81a1ca2 | https://github.com/clerk/javascript/pull/9723/commits/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| https://github.com/dominic-clerk |
| dominic-clerk | https://github.com/dominic-clerk |
| force-pushed | https://github.com/clerk/javascript/compare/b8f32f4b27eeb21327b67927e0320fbecefc22af..81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| b8f32f4 | https://github.com/clerk/javascript/commit/b8f32f4b27eeb21327b67927e0320fbecefc22af |
| 81a1ca2 | https://github.com/clerk/javascript/commit/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
|
Compare
| https://github.com/clerk/javascript/compare/b8f32f4b27eeb21327b67927e0320fbecefc22af..81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| September 14, 2026 11:47 | https://github.com/clerk/javascript/pull/9723#event-31097422807 |
| https://github.com/apps/vercel |
| vercel | https://github.com/apps/vercel |
| deployed | https://clerk-js-sandbox-mit7fmqle.clerkstage.dev |
| Preview – clerk-js-sandbox | https://clerk-js-sandbox-mit7fmqle.clerkstage.dev |
| September 14, 2026 11:48 | https://github.com/clerk/javascript/pull/9723#event-31097468119 |
| View deployment | https://clerk-js-sandbox-mit7fmqle.clerkstage.dev |
| https://github.com/apps/vercel |
| vercel | https://github.com/apps/vercel |
| deployed | https://swingset-d0lxzbfc3.clerkstage.dev |
| Preview – swingset | https://swingset-d0lxzbfc3.clerkstage.dev |
| September 14, 2026 11:51 | https://github.com/clerk/javascript/pull/9723#event-31097583556 |
| View deployment | https://swingset-d0lxzbfc3.clerkstage.dev |
| https://github.com/Ephem |
| Ephem | https://github.com/Ephem |
|
Sep 16, 2026
| https://github.com/clerk/javascript/pull/9723#pullrequestreview-5219913219 |
|
View reviewed changes
| https://github.com/clerk/javascript/pull/9723/files/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
| https://github.com/dominic-clerk |
| dominic-clerk | https://github.com/dominic-clerk |
| 5e2a46f | https://github.com/clerk/javascript/commit/5e2a46f2c9944ca6ba129b2db3a4d3a2937d26cf |
| Sep 16, 2026 | https://github.com/clerk/javascript/pull/9723#event-31232837374 |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
| https://github.com/dominic-clerk |
| dominic-clerk | https://github.com/dominic-clerk |
| September 16, 2026 09:05 | https://github.com/clerk/javascript/pull/9723#event-31232840245 |
| https://github.com/clerk-cookie |
| clerk-cookie | https://github.com/clerk-cookie |
|
Sep 16, 2026
| https://github.com/clerk/javascript/pull/9723#ref-pullrequest-5472509137 |
|
ci(repo): Version packages
#9782
| https://github.com/clerk/javascript/pull/9782 |
| https://github.com/The-Obstacle-Is-The-Way |
| The-Obstacle-Is-The-Way | https://github.com/The-Obstacle-Is-The-Way |
|
Oct 6, 2026
| https://github.com/clerk/javascript/pull/9723#ref-pullrequest-5732465340 |
|
Bundle #1441's nine dependency updates, hold lint-staged at 17.5.1 (DEBT-514), and archive DEBT-506
The-Obstacle-Is-The-Way/naltrexone-university#1409
| https://github.com/The-Obstacle-Is-The-Way/naltrexone-university/pull/1409 |
| Deployed | https://swingset-d0lxzbfc3.clerkstage.dev |
| vercel[bot] | https://github.com/apps/vercel |
|
View deployment
| https://swingset-d0lxzbfc3.clerkstage.dev |
| Deployed | https://clerk-js-sandbox-mit7fmqle.clerkstage.dev |
| vercel[bot] | https://github.com/apps/vercel |
|
View deployment
| https://clerk-js-sandbox-mit7fmqle.clerkstage.dev |
| https://github.co/hiddenchars |
| https://github.com/clerk/javascript/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fclerk%2Fjavascript%2Fpull%2F9723 |
|
| https://github.com/Ephem |
|
Ephem
| https://github.com/Ephem |
|
| https://github.com/clerk/javascript/pull/9723/files/81a1ca2d279e4683bcd804cc396cf19d44587b28 |
|
| https://github.com/wobsoriano |
|
wobsoriano
| https://github.com/wobsoriano |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
|
nextjs
| https://github.com/clerk/javascript/issues?q=state%3Aopen%20label%3Anextjs |
| Please reload this page | https://github.com/clerk/javascript/pull/9723 |
|
| https://github.com/dominic-clerk |
|
| https://github.com/Ephem |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |