Skip to content
OpenAdvisories

Product · prebid

prebid-server-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-54734

    Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction

    Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious actor who ca…

    prebid prebid-server-java