Browse all 4 CVE security advisories affecting prebid. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54734 | Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction — prebid-server-java CWE-918 | 10.0 | Critical | 2026-09-17 |
| CVE-2026-54735 | prebid-server's request forgery vulnerability allows for possible host environment data extraction — prebid-server CWE-918 | 10.0 | Critical | 2026-07-29 |
| CVE-2025-59039 | Prebid Universal Creative on npm briefly compromised — prebid-universal-creative CWE-506 | 9.8AI | Critical AI | 2025-09-09 |
| CVE-2025-59038 | Prebid.js NPM package briefly compromised — Prebid.js CWE-506 | 8.2AI | High AI | 2025-09-09 |
This page lists every published CVE security advisory associated with prebid. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.