CVE-2026-54734
- Source
- https://cve.org/CVERecord?id=CVE-2026-54734
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54734.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-54734
- Aliases
-
- GHSA-fr2c-g2f8-qchg
- Published
- 2026-09-17T21:59:45Z
- Modified
- 2026-09-19T14:02:31Z
- Severity
-
- 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction
- Details
-
Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious actor who can supply bid-request parameters can cause the server to send HTTP requests to unintended destinations, potentially reaching internal network services, metadata endpoints, or other sensitive server endpoints with the server's network access. This issue is fixed in version 3.43.0.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-918" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54734.json" }- References
-
- https://github.com/prebid/prebid-server-java/releases/tag/3.43.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54734.json
- https://github.com/prebid/prebid-server-java/security/advisories/GHSA-fr2c-g2f8-qchg
- https://nvd.nist.gov/vuln/detail/CVE-2026-54734
- https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f
- https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c
- https://github.com/prebid/prebid-server-java/pull/4522
Affected packages
Git / github.com/prebid/prebid-server-java
Affected ranges
- Type
- GIT
- Repo
- https://github.com/prebid/prebid-server-java
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0" }, { "fixed": "3.43.0" } ], "source": [ "AFFECTED_FIELD", "REFERENCES" ] }
Affected versions
1.*
1.100.0
1.101.0
1.102.0
1.103.0
1.104.0
1.105.0
1.106.0
1.107.0
1.108.0
1.109.0
1.110.0
1.111.0
1.112.0
1.113.0
1.114.0
1.115.0
1.116.0
1.117.0
1.118.0
1.119.0
1.120.0
1.121.0
1.122.0
1.123.0
1.124.0
1.125.0
1.126.0
1.127.0
1.128.0
1.129.0
1.130.0
1.17.1
1.17.2
1.18.0
1.19.0
1.20.0
1.21.0
1.22.0
1.23.0
1.24.0
1.25.0
1.26.0
1.27.0
1.28.0
1.29.0
1.30.0
1.31.0
1.32.0
1.33.0
1.34.0
1.35.0
1.36.0
1.37.0
1.38.0
1.39.0
1.40.0
1.41.0
1.41.1
1.42.0
1.42.1
1.44.0
1.45.0
1.46.0
1.47.0
1.48.0
1.49.0
1.50.0
1.51.0
1.51.1
1.52.0
1.53.0
1.54.0
1.55.0
1.56.0
1.57.0
1.58.0
1.59.0
1.60.0
1.61.0
1.62.0
1.63.0
1.64.0
1.65.0
1.66.0
1.67.0
1.68.0
1.69.0
1.70.0
1.71.0
1.72.0
1.73.0
1.74.0
1.75.0
1.76.0
1.77.0
1.78.0
1.79.0
1.80.0
1.81.0
1.82.0
1.83.0
1.84.0
1.85.0
1.86.0
1.87.0
1.87.1
1.88.0
1.89.0
1.90.0
1.91.0
1.92.0
1.93.0
1.94.0
1.95.0
1.96.0
1.97.0
1.98.0
1.99.0
2.*
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.2.0
2.3.0
2.4.0
2.5.0
2.6.0
2.7.0
2.8.0
2.9.0
3.*
3.0.0
3.1.0
3.10.0
3.11.0
3.12.0
3.13.0
3.14.0
3.15.0
3.16.0
3.17.0
3.18.0
3.19.0
3.2.0
3.20.0
3.21.0
3.22.0
3.23.0
3.24.0
3.25.0
3.26.0
3.27.0
3.28.0
3.29.0
3.3.0
3.30.0
3.31.0
3.32.0
3.33.0
3.34.0
3.35.0
3.36.0
3.37.0
3.38.0
3.39.0
3.4.0
3.40.0
3.41.0
3.42.0
3.5.0
3.6.0
3.7.0
3.8.0
3.9.0
v1.*
v1.43.0
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54734.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "198447921365364417861485777795040228085",
"length": 109
},
"id": "CVE-2026-54734-04b0b1ef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java",
"function": "resolveHost"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "325723664724250853215572684252335233220",
"length": 2074
},
"id": "CVE-2026-54734-063eed4a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java",
"function": "resolveRequestUri"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "295333946475127678786672498926198131380",
"length": 317
},
"id": "CVE-2026-54734-0797b00a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java",
"function": "generateEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "205724428062441058202872864483192664522",
"length": 119
},
"id": "CVE-2026-54734-102d8fbc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "326024855955118129235369377191518692939",
"length": 191
},
"id": "CVE-2026-54734-11331d16",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194787928470760412672961016478124193125",
"length": 857
},
"id": "CVE-2026-54734-1324c5b6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java",
"function": "makeNurl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "144137869402485534037224078968511650115",
"length": 477
},
"id": "CVE-2026-54734-140f5fdb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26448600067591417355506136156770850850",
"length": 211
},
"id": "CVE-2026-54734-142327ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"87700735945997758033829849344141299097",
"339218012365580896802273216866556755635",
"236000992127398661739782014767637555194",
"249971000108541731010015487763347052945"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-15aba945",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"146697494684206715940510675132573813518",
"253105642484743772267297380002276822802",
"68372111596684274098760121848233765545",
"310813474359394882099381641455167007850",
"40396050193794252413835044607009416587",
"298186525586847102470680985214081235270",
"77511898461773031788743504831812358753",
"62593950908185012358943082808571655488"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-15c0cb6a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "3378455433483132897279905891905439541",
"length": 215
},
"id": "CVE-2026-54734-18a27c8d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112819697576926354725468100793929029771",
"250836975833495129493346177154849106619",
"255261545408217889495219791354087419520",
"11629183222882135673023317539271404922"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-1aa50e45",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136001721099932037486328626834258699535",
"243576997495737688952679671959555406552",
"317660394276845089465003731891791304134",
"137057400418208433334075007433650114448"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-1bca71de",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "254533809486248975939664102101385469292",
"length": 779
},
"id": "CVE-2026-54734-1cd917ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"146697494684206715940510675132573813518",
"253105642484743772267297380002276822802",
"68372111596684274098760121848233765545",
"310813474359394882099381641455167007850",
"40396050193794252413835044607009416587",
"298186525586847102470680985214081235270",
"77511898461773031788743504831812358753",
"62593950908185012358943082808571655488"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-1d599b9c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "205724428062441058202872864483192664522",
"length": 119
},
"id": "CVE-2026-54734-1d892492",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "100377217902792627159617800621781246916",
"length": 253
},
"id": "CVE-2026-54734-1da0ed0b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "198447921365364417861485777795040228085",
"length": 109
},
"id": "CVE-2026-54734-1fcfd269",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java",
"function": "resolveHost"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "168346161615168504659913106454530517854",
"length": 347
},
"id": "CVE-2026-54734-24936d18",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"96891567795429607972553436875316226459",
"80347162700628503559989309174905312558",
"104044911011898325354946748264802825005",
"305898780913344820149786594168584634026"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-24bda3dc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"281796986388989401111810648242374699747",
"270399037814911436693556139630287716864",
"334815980352883604591950754421619920823",
"134377952921509696062132129902810415979"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-253229e1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149763479780531882255313046342807250097",
"83236961482920358345410020283779860708",
"302179611892479291889998832496286464532",
"106906292244498086149478812946151159288"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-2ac8cf7b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "29446028831360784757693097899292670500",
"length": 205
},
"id": "CVE-2026-54734-2c5bb8e7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "123058305822297376937063137156821750501",
"length": 354
},
"id": "CVE-2026-54734-30ea9667",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"242722448560688849191711518731643548319",
"299195945793259733459796802137797842751",
"149299233698182657409850321328027009696",
"214953583269298819781877242131863551335",
"127963044079726698574853167651910855763"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-31e02486",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287458201373627428624036341291997531923",
"length": 340
},
"id": "CVE-2026-54734-3680c5b2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java",
"function": "createRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72341183366717434413081854802403715889",
"length": 447
},
"id": "CVE-2026-54734-3abdc54c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "110609896534169488318700426352848986206",
"length": 122
},
"id": "CVE-2026-54734-3b4e3c13",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"316993446866107682171547612503971438711",
"31119820498014160639573297770224042671",
"205174457258449896167508470939380642029",
"260525916452780929599517775492611659771"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-3ff4d2f5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/blis/BlisBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"49424013603908876118454151205962309013",
"31020292668360684537132318375577368833",
"46482676383564045127118004623936127776",
"252904503037920538881801907978078567877"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-42b41cd4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136001721099932037486328626834258699535",
"243576997495737688952679671959555406552",
"317660394276845089465003731891791304134",
"137057400418208433334075007433650114448"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4391e6b8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"317404591423247720015642199692451731058",
"3793145171331165429434690006090147355",
"298265823188676952008800153207957321985",
"308176784227052409453534064267153662756",
"274392003005117655454855067371589433834",
"207043211942330825131371115835424927412",
"90557739612285363455176320688249836183",
"67937546297553063890684527440352315699",
"163022003313975206591207762109603683814",
"299553485261949254798471201003397790793",
"240940978578094480858070662416268548651",
"282421319596452170092220110712268313034",
"186551298168796781819288509982024283691",
"3674184820351419962543168409470832331",
"316082756977972663154626221818906020879",
"304738865407738277556743941914781096694",
"12692723895706965087413713377367197506",
"87269095160866608592830810009449839746",
"245616666025038579243003540223094357804",
"319552126412152631686109523745320596098",
"135827200962895167265495198867569770481"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4440530f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/util/HttpUtil.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"65116636555740351431898515799888429094",
"270307274811751352984965522333900435330",
"24588467790106484326863934475953564293",
"142922705970595209841081558719327609334",
"106849073257160457822747482616470621103",
"318331261984344721415374111590964096526",
"26991442672704444071846730922812697485",
"33296918775852624317849476032703614434",
"186120461722454788613474245220441791801",
"69869946910786976897018462321503505077"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4a19d507",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"291940056002300087666260752459208575227",
"199057242901083349961182577761151894383",
"131251461756365222899606563901058404489",
"254684418109396574834516152113184505751"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4c0b06e9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"281796986388989401111810648242374699747",
"270399037814911436693556139630287716864",
"334815980352883604591950754421619920823",
"134377952921509696062132129902810415979"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4d580954",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"236662444222671612515195600111011867063",
"51165247372708048648536827353614800359",
"225013417988127083474428733662943035690",
"78082207197644387512519239848967677147"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4d650a3b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"285048521093033192642303219207626814896",
"316139895997989188964789859464311804411",
"311917238025105642837974257008881435510",
"290265896772489177430458972687959778442"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-4ea32f7c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"240754367268061609145189909854840835880",
"9784352965043249190899240327764399197",
"4843623379826827927486382529397300008",
"297626583701050116432922887650842379405",
"155772693972373606110694454232418531668",
"282184938117357067000613221883438072870"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-5371d914",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"43665600410275707578680208388205300842",
"27544396753061894526652414708124033582",
"314374712536583102219258226918466999445",
"196363716389934998576644513528307667817"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-543635cd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "160885591956734117579398150366617542522",
"length": 336
},
"id": "CVE-2026-54734-544fbc8d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"23965597119713868139050266423445601545",
"163722236020575939422342485580015338352",
"136293212947507186558880791934948105372",
"189560417956647770526372575002094845494",
"117650743729868865563023395350469045663"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-557738a6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"160105606772227391233616234135486648295",
"205415514667796891906070016515694149297",
"202263242358628995810107902119071378143",
"112588629805774122905892225989848165238"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-567cce4d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1824989807651402443877033484465338296",
"169071625794028345851715364358895856895",
"84312448866803018228606672249270580030",
"20954636128091706107542023409339029838"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-589be445",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"226457389172253057167073568243346691775",
"56285101208970615671662513163544755075",
"266197632045839666305158594419187915093",
"325396406536416029426755511109353708815"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-58a79e27",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "47385572887920837459578368574515469034",
"length": 801
},
"id": "CVE-2026-54734-596c3b4d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"317404591423247720015642199692451731058",
"3793145171331165429434690006090147355",
"298265823188676952008800153207957321985",
"308176784227052409453534064267153662756",
"274392003005117655454855067371589433834",
"207043211942330825131371115835424927412",
"90557739612285363455176320688249836183",
"67937546297553063890684527440352315699",
"163022003313975206591207762109603683814",
"299553485261949254798471201003397790793",
"240940978578094480858070662416268548651",
"282421319596452170092220110712268313034",
"186551298168796781819288509982024283691",
"3674184820351419962543168409470832331",
"316082756977972663154626221818906020879",
"304738865407738277556743941914781096694",
"12692723895706965087413713377367197506",
"87269095160866608592830810009449839746",
"245616666025038579243003540223094357804",
"319552126412152631686109523745320596098",
"135827200962895167265495198867569770481"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-5cc0f8f1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/util/HttpUtil.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"291940056002300087666260752459208575227",
"199057242901083349961182577761151894383",
"131251461756365222899606563901058404489",
"254684418109396574834516152113184505751"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-5d7e22be",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102091176806943416255698272611444713877",
"314694862789134794287612250850139325132",
"263579413504597827202990973029781798966",
"275975137270250295830793075226504214149"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-5da660d4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"279706734337969711276944619508768803402",
"161697725069110479379988733867009487600",
"220446331542254187131624682695256021801",
"274499127956518883075628238087346483931"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-5eb059e4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "135173989252584053840293366035839628452",
"length": 907
},
"id": "CVE-2026-54734-62ff07e0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"242722448560688849191711518731643548319",
"299195945793259733459796802137797842751",
"149299233698182657409850321328027009696",
"214953583269298819781877242131863551335",
"127963044079726698574853167651910855763"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-6571bcd5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "29446028831360784757693097899292670500",
"length": 205
},
"id": "CVE-2026-54734-6657ca5c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "256844926046957464166368292841557472921",
"length": 207
},
"id": "CVE-2026-54734-6918c734",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java",
"function": "buildEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"1824989807651402443877033484465338296",
"169071625794028345851715364358895856895",
"84312448866803018228606672249270580030",
"20954636128091706107542023409339029838"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-699a0b35",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "47385572887920837459578368574515469034",
"length": 801
},
"id": "CVE-2026-54734-6b10f901",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "48537107275402019844369628240305864536",
"length": 109
},
"id": "CVE-2026-54734-6e3efc65",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java",
"function": "getUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "3378455433483132897279905891905439541",
"length": 215
},
"id": "CVE-2026-54734-6e600fb8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "280961168691186241361749293419903767916",
"length": 503
},
"id": "CVE-2026-54734-7145c61c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "254533809486248975939664102101385469292",
"length": 779
},
"id": "CVE-2026-54734-71acd382",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"316993446866107682171547612503971438711",
"31119820498014160639573297770224042671",
"205174457258449896167508470939380642029",
"260525916452780929599517775492611659771"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-71ec7618",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/blis/BlisBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102737159447580504879788362789157601682",
"133831985419788942424348893577529945288",
"49043621337580601358404091147211999137",
"32079529768729969600705077064494453893"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-73dd11ce",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "68497262131827162889669658055090680917",
"length": 112
},
"id": "CVE-2026-54734-74a6aa18",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"284525389009627087920079788720375447521",
"274749567923501967817816867020845355858",
"272156295723065797357338065558388908489",
"261871633965461541406672580108138526964",
"309044027783800481001122104576846632935",
"120958577524960861837488629084976667692",
"46650959388806193429793135960751516610",
"31809851903868605951313693569313306151"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-754bea6e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"154783082640643625416130065920291399597",
"155426378231096812109262559517797054728",
"146494589104229048388313421070746589344",
"159386282495881468776322017567054587719"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-76f12115",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "29216014568223424093997818731502630757",
"length": 2025
},
"id": "CVE-2026-54734-78bae141",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"120310285897101297882715487172042616125",
"148092361413001500524174258816662949372",
"142314189194569539848618597784506687604",
"101233969417393396275428510293374643777"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-791d7bc9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "68497262131827162889669658055090680917",
"length": 112
},
"id": "CVE-2026-54734-7ae14cfa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102091176806943416255698272611444713877",
"314694862789134794287612250850139325132",
"263579413504597827202990973029781798966",
"275975137270250295830793075226504214149"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-7b4dd5e7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "123058305822297376937063137156821750501",
"length": 354
},
"id": "CVE-2026-54734-7b864a85",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"66239506392448446163199643802105469803",
"182021114749306458630970339781753541191",
"182817289163253521745380603197905290590",
"269053473226481069626940376561355821878",
"296192193233276416624489049893947052063",
"272468714868279221782383218660961864821",
"93379800141491797006434039502841204056",
"135240865330285176540098886699368230888",
"113791249148395039706340606711027523507",
"166777575091389150067891048782033268915",
"238637461712501048221300978659958259870"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-7bb4d0c6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/test/java/org/prebid/server/util/HttpUtilTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "247324315646467640816542430227826476576",
"length": 183
},
"id": "CVE-2026-54734-7f051c76",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "135173989252584053840293366035839628452",
"length": 907
},
"id": "CVE-2026-54734-815d3806",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"329930066883069924688513157832667193257",
"83223479197167002041290363507781711378",
"153664693407880433505066021071052642492",
"93125674813456976799775912572197491787"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-82078d5f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288556246273132152855019877020787561785",
"length": 140
},
"id": "CVE-2026-54734-832a7381",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java",
"function": "resolveEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102737159447580504879788362789157601682",
"133831985419788942424348893577529945288",
"49043621337580601358404091147211999137",
"32079529768729969600705077064494453893"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-85b4ad17",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112902325360799230612885648091019814613",
"107542164348429930386550962850565994621",
"202974815435062298758687048207172576483",
"266801763609397430050950001887719019257"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-8c60490c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"285048521093033192642303219207626814896",
"316139895997989188964789859464311804411",
"311917238025105642837974257008881435510",
"290265896772489177430458972687959778442"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-8d08242b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"340201439983668149886376724191984963115",
"9233763714860306532235912450274142321",
"30654964907167065863616065335850937239",
"52700347096312755101960062056881199581"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-918038e2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "48537107275402019844369628240305864536",
"length": 109
},
"id": "CVE-2026-54734-95c99ae6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java",
"function": "getUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"329930066883069924688513157832667193257",
"83223479197167002041290363507781711378",
"153664693407880433505066021071052642492",
"93125674813456976799775912572197491787"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-964f25e4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"226457389172253057167073568243346691775",
"56285101208970615671662513163544755075",
"266197632045839666305158594419187915093",
"325396406536416029426755511109353708815"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-96f19ae4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"311350018275977072247131705439571699162",
"329296835340038324082018210010208337319",
"300667061421920673392589571963419486282",
"77997134159007913893780145344292789064",
"97319979876619997879648818568689392133"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-974dbda6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "168346161615168504659913106454530517854",
"length": 347
},
"id": "CVE-2026-54734-984c6775",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121298105389802982990679906507346813363",
"146131975686587381233418550934762506765",
"38430366634770192716303688219234802882",
"198420560176938766068501775266844806025"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-9873fa1e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "299570797457617937038961068147666053535",
"length": 174
},
"id": "CVE-2026-54734-9926805a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"120310285897101297882715487172042616125",
"148092361413001500524174258816662949372",
"142314189194569539848618597784506687604",
"101233969417393396275428510293374643777"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-9d4cdd78",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288556246273132152855019877020787561785",
"length": 140
},
"id": "CVE-2026-54734-9e66a729",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java",
"function": "resolveEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312351361871839404076036554235621223642",
"length": 366
},
"id": "CVE-2026-54734-a0729691",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java",
"function": "createRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"145387015834485738743647468463203512119",
"241768233704889487508255529968919804409",
"304983017390747410008135062765666450998",
"265967167399477038343542081623229961008"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-a1913231",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112902325360799230612885648091019814613",
"107542164348429930386550962850565994621",
"202974815435062298758687048207172576483",
"266801763609397430050950001887719019257"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-a344262b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "22740647234983536566213812310888417344",
"length": 1279
},
"id": "CVE-2026-54734-a4398af7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "205724428062441058202872864483192664522",
"length": 119
},
"id": "CVE-2026-54734-a6ae3d70",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72341183366717434413081854802403715889",
"length": 447
},
"id": "CVE-2026-54734-a6f0e39d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "326024855955118129235369377191518692939",
"length": 191
},
"id": "CVE-2026-54734-a79efb98",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"313202141399526773956506067566965006921",
"253460273662214469509539098522086228685",
"276811962962762363051278882047845439251",
"57523820587681780368144471924690803417"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-a7c44a00",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194787928470760412672961016478124193125",
"length": 857
},
"id": "CVE-2026-54734-ab28e1f3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java",
"function": "makeNurl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"13577048140726214241897356570783225510",
"338782550213323561654207341829378626398",
"274197013755635562132645404613869801308",
"142805594745531359282296112039545247256"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-b08a9d45",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26448600067591417355506136156770850850",
"length": 211
},
"id": "CVE-2026-54734-b09e9d6c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "22740647234983536566213812310888417344",
"length": 1279
},
"id": "CVE-2026-54734-b2c46996",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "168346161615168504659913106454530517854",
"length": 347
},
"id": "CVE-2026-54734-b8aaee53",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"96891567795429607972553436875316226459",
"80347162700628503559989309174905312558",
"104044911011898325354946748264802825005",
"305898780913344820149786594168584634026"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-b9c0fa30",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287458201373627428624036341291997531923",
"length": 340
},
"id": "CVE-2026-54734-bd63ae03",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java",
"function": "createRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"13577048140726214241897356570783225510",
"338782550213323561654207341829378626398",
"274197013755635562132645404613869801308",
"142805594745531359282296112039545247256"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-be5a0ff4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "260377427731277464057841570865515101109",
"length": 118
},
"id": "CVE-2026-54734-c0a62e63",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/blis/BlisBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "144137869402485534037224078968511650115",
"length": 477
},
"id": "CVE-2026-54734-c1bebc44",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "110609896534169488318700426352848986206",
"length": 122
},
"id": "CVE-2026-54734-c23e626d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "168346161615168504659913106454530517854",
"length": 347
},
"id": "CVE-2026-54734-c2a65a76",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"284525389009627087920079788720375447521",
"274749567923501967817816867020845355858",
"272156295723065797357338065558388908489",
"261871633965461541406672580108138526964",
"309044027783800481001122104576846632935",
"120958577524960861837488629084976667692",
"46650959388806193429793135960751516610",
"31809851903868605951313693569313306151"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-c3f9540f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "260377427731277464057841570865515101109",
"length": 118
},
"id": "CVE-2026-54734-c46a5e9f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/blis/BlisBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"49424013603908876118454151205962309013",
"31020292668360684537132318375577368833",
"46482676383564045127118004623936127776",
"252904503037920538881801907978078567877"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-c4fafc64",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"160105606772227391233616234135486648295",
"205415514667796891906070016515694149297",
"202263242358628995810107902119071378143",
"112588629805774122905892225989848165238"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-c6a309c9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "29216014568223424093997818731502630757",
"length": 2025
},
"id": "CVE-2026-54734-c7b20e13",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "100377217902792627159617800621781246916",
"length": 253
},
"id": "CVE-2026-54734-c9474dd6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "160885591956734117579398150366617542522",
"length": 336
},
"id": "CVE-2026-54734-c9f3dbd0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"23965597119713868139050266423445601545",
"163722236020575939422342485580015338352",
"136293212947507186558880791934948105372",
"189560417956647770526372575002094845494",
"117650743729868865563023395350469045663"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-ce2b6036",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"311350018275977072247131705439571699162",
"329296835340038324082018210010208337319",
"300667061421920673392589571963419486282",
"77997134159007913893780145344292789064",
"97319979876619997879648818568689392133"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-cef88562",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"340201439983668149886376724191984963115",
"9233763714860306532235912450274142321",
"30654964907167065863616065335850937239",
"52700347096312755101960062056881199581"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-d3ed496c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "263171267421688729582633180995264582898",
"length": 273
},
"id": "CVE-2026-54734-d51026cd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "274990817751974975259969025553543368873",
"length": 218
},
"id": "CVE-2026-54734-d6c4e621",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"154783082640643625416130065920291399597",
"155426378231096812109262559517797054728",
"146494589104229048388313421070746589344",
"159386282495881468776322017567054587719"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-d8e60778",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "274990817751974975259969025553543368873",
"length": 218
},
"id": "CVE-2026-54734-d918aaa1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112819697576926354725468100793929029771",
"250836975833495129493346177154849106619",
"255261545408217889495219791354087419520",
"11629183222882135673023317539271404922"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-d98bf341",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"65116636555740351431898515799888429094",
"270307274811751352984965522333900435330",
"24588467790106484326863934475953564293",
"142922705970595209841081558719327609334",
"106849073257160457822747482616470621103",
"318331261984344721415374111590964096526",
"26991442672704444071846730922812697485",
"33296918775852624317849476032703614434",
"186120461722454788613474245220441791801",
"69869946910786976897018462321503505077"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-d9d1a395",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149763479780531882255313046342807250097",
"83236961482920358345410020283779860708",
"302179611892479291889998832496286464532",
"106906292244498086149478812946151159288"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-daa0f27b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121298105389802982990679906507346813363",
"146131975686587381233418550934762506765",
"38430366634770192716303688219234802882",
"198420560176938766068501775266844806025"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-dcbeb9e2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"279706734337969711276944619508768803402",
"161697725069110479379988733867009487600",
"220446331542254187131624682695256021801",
"274499127956518883075628238087346483931"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-dcd5a21a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312351361871839404076036554235621223642",
"length": 366
},
"id": "CVE-2026-54734-e1c727ec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java",
"function": "createRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"236662444222671612515195600111011867063",
"51165247372708048648536827353614800359",
"225013417988127083474428733662943035690",
"78082207197644387512519239848967677147"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-e3f56149",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "325723664724250853215572684252335233220",
"length": 2074
},
"id": "CVE-2026-54734-e5d6d19e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java",
"function": "resolveRequestUri"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "263171267421688729582633180995264582898",
"length": 273
},
"id": "CVE-2026-54734-e647b251",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java",
"function": "resolveUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"324170616292993979031833644566802058840",
"77825270456680289990672519234987375722",
"304983017390747410008135062765666450998",
"265967167399477038343542081623229961008"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-e76aa53d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "147872984151634023741940616129085953688",
"length": 188
},
"id": "CVE-2026-54734-e7cf5ff8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "205724428062441058202872864483192664522",
"length": 119
},
"id": "CVE-2026-54734-e932c6d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java",
"function": "makeUrl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "256844926046957464166368292841557472921",
"length": 207
},
"id": "CVE-2026-54734-ef0085ca",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java",
"function": "buildEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"145387015834485738743647468463203512119",
"241768233704889487508255529968919804409",
"304983017390747410008135062765666450998",
"265967167399477038343542081623229961008"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-f1ac10eb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "147872984151634023741940616129085953688",
"length": 188
},
"id": "CVE-2026-54734-f1bd0ebd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"240754367268061609145189909854840835880",
"9784352965043249190899240327764399197",
"4843623379826827927486382529397300008",
"297626583701050116432922887650842379405",
"155772693972373606110694454232418531668",
"282184938117357067000613221883438072870"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-f46e9862",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "299570797457617937038961068147666053535",
"length": 174
},
"id": "CVE-2026-54734-f69cd704",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java",
"function": "makeHttpRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"87700735945997758033829849344141299097",
"339218012365580896802273216866556755635",
"236000992127398661739782014767637555194",
"249971000108541731010015487763347052945"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-f76ba0fa",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"313202141399526773956506067566965006921",
"253460273662214469509539098522086228685",
"276811962962762363051278882047845439251",
"57523820587681780368144471924690803417"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-f94d876f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"324170616292993979031833644566802058840",
"77825270456680289990672519234987375722",
"304983017390747410008135062765666450998",
"265967167399477038343542081623229961008"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-fadb222a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "247324315646467640816542430227826476576",
"length": 183
},
"id": "CVE-2026-54734-fbfbec1f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java",
"function": "resolveEndpoint"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "280961168691186241361749293419903767916",
"length": 503
},
"id": "CVE-2026-54734-fc5d36f9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java",
"function": "makeHttpRequests"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "295333946475127678786672498926198131380",
"length": 317
},
"id": "CVE-2026-54734-fe08bff2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java",
"function": "generateEndpointUrl"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"43665600410275707578680208388205300842",
"27544396753061894526652414708124033582",
"314374712536583102219258226918466999445",
"196363716389934998576644513528307667817"
],
"threshold": 0.9
},
"id": "CVE-2026-54734-fec0a739",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f",
"target": {
"file": "src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java"
}
}
]
vanir_signatures_modified
"2026-09-19T14:02:31Z"