Threats affecting pkg:maven/org.prebid/prebid-server-java

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.6%	CVE-2026-54734prebid-server-java · Server-Side Request Forgery (SSRF) Critical10.0EPSS 0.6%2026-09-17CVE Database V5CVE-2026-54734 CVE-2026-54734 is a critical Server-Side Request Forgery (SSRF) vulnerability in prebid-server-java versions prior to 3.43.0. Certain bidder adapters improperly interpolate user-supplied parameters into outbound request URLs without proper validation, allowing attackers to cause the server to send HTTP requests to unintended destinations. This can lead to unauthorized access to internal network services or sensitive server endpoints. The issue is fixed in version 3.43.0. EPSS 0.6%Vulnerability CWE-918	CVE Database V5	2026-09-17

Page 1 of 1