p
prebid
Security Risk Profile
86
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 9, 2025 to present
3
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
9.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
86/100
critical
Severity Distribution
Critical
2High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
1
2
Input Validation
1
Most Affected Products
1. prebid Prebid.js3
2. prebid Universal Creative2
3. prebid.org Prebid Server1
4. go/github.com/prebid/prebid-server1
5. go/github.com/prebid/prebid-server/v21
Recent Vulnerabilities
See more →CVE-2026-54735
CVSS 10.0critical
prebid-server's request forgery vulnerability allows for possible host environment data extraction
Jul 29, 2026
CVE-2025-59039
CVSS 9.3critical
Prebid Universal Creative on npm briefly compromised
Sep 9, 2025🔧 No Patch
CVE-2025-59038
CVSS 8.6high
Prebid.js NPM package briefly compromised
Sep 9, 2025
Monitor prebid in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.