Prebid

4 CVEs in 5 Prebid products, including Prebid.js, Prebid-Server, Prebid Server. Newest: CVE-2026-54734 (2026-09-17).

Prebid products with known CVEs

ProductCVEs
Prebid.js1
Prebid-Server1
Prebid Server1
Prebid-Server-Java1
Prebid-Universal-Creative1
Prebid CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54734Critical10.02026-09-17Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request UR…
CVE-2026-54735Critical10.02026-07-29Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Ser…
CVE-2025-590392025-09-09Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related m…
CVE-2025-590382025-09-09Prebid.js is a free and open source library for publishers to quickly implement header bidding. NPM users of prebid 10.9.2 may have been briefly compromised by…