prebid
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Prebid.js | 1 | – | Sep 9, 2025 |
| prebid-server | 1 | – | Jul 29, 2026 |
| prebid-server-java | 1 | – | Sep 17, 2026 |
| prebid-universal-creative | 1 | – | Sep 9, 2025 |
Exploited and recent CVEs
- CVE-2026-54734 Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction 0.6%
- CVE-2026-54735 prebid-server's request forgery vulnerability allows for possible host environment data extraction 0.6%
- CVE-2025-59039 Prebid Universal Creative on npm briefly compromised 0.3%
- CVE-2025-59038 Prebid.js NPM package briefly compromised 0.4%