{"id":"CVE-2026-54734","summary":"Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction","details":"Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious actor who can supply bid-request parameters can cause the server to send HTTP requests to unintended destinations, potentially reaching internal network services, metadata endpoints, or other sensitive server endpoints with the server's network access. This issue is fixed in version 3.43.0.","aliases":["GHSA-fr2c-g2f8-qchg"],"modified":"2026-09-19T14:02:31.323174Z","published":"2026-09-17T21:59:45.873Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54734.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-918"]},"references":[{"type":"WEB","url":"https://github.com/prebid/prebid-server-java/releases/tag/3.43.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54734.json"},{"type":"ADVISORY","url":"https://github.com/prebid/prebid-server-java/security/advisories/GHSA-fr2c-g2f8-qchg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54734"},{"type":"FIX","url":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"type":"FIX","url":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"type":"FIX","url":"https://github.com/prebid/prebid-server-java/pull/4522"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/prebid/prebid-server-java","events":[{"introduced":"0"},{"fixed":"a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"fixed":"d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"fixed":"ba7f97e33fe1dcc5e64f926bc8bea5d4d4252fc1"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.43.0"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["3.42.0","3.41.0","3.40.0","3.39.0","3.38.0","3.37.0","3.36.0","3.35.0","3.34.0","3.33.0","3.32.0","3.31.0","3.30.0","3.29.0","3.28.0","3.27.0","3.26.0","3.25.0","3.24.0","3.23.0","3.22.0","3.21.0","3.20.0","3.19.0","3.18.0","3.17.0","3.16.0","3.15.0","3.14.0","3.13.0","3.12.0","3.11.0","3.10.0","3.9.0","3.8.0","3.7.0","3.6.0","3.5.0","3.4.0","3.3.0","3.2.0","3.1.0","3.0.0","2.15.0","2.14.0","2.13.0","2.12.0","2.11.0","2.10.0","2.9.0","2.8.0","2.7.0","2.6.0","2.5.0","2.4.0","2.3.0","2.2.0","2.1.0","2.0.0","1.130.0","1.129.0","1.128.0","1.127.0","1.126.0","1.125.0","1.124.0","1.123.0","1.122.0","1.121.0","1.120.0","1.119.0","1.118.0","1.117.0","1.116.0","1.115.0","1.114.0","1.113.0","1.112.0","1.111.0","1.110.0","1.109.0","1.108.0","1.107.0","1.106.0","1.105.0","1.104.0","1.103.0","1.102.0","1.101.0","1.100.0","1.99.0","1.98.0","1.97.0","1.96.0","1.95.0","1.94.0","1.93.0","1.92.0","1.91.0","1.90.0","1.89.0","1.88.0","1.87.1","1.87.0","1.86.0","1.85.0","1.84.0","1.83.0","1.82.0","1.81.0","1.80.0","1.79.0","1.78.0","1.77.0","1.76.0","1.75.0","1.74.0","1.73.0","1.72.0","1.71.0","1.70.0","1.69.0","1.68.0","1.67.0","1.66.0","1.65.0","1.64.0","1.63.0","1.62.0","1.61.0","1.60.0","1.59.0","1.58.0","1.57.0","1.56.0","1.55.0","1.54.0","1.53.0","1.52.0","1.51.1","1.51.0","1.50.0","1.49.0","1.48.0","1.47.0","1.46.0","1.45.0","1.44.0","v1.43.0","1.42.1","1.42.0","1.41.1","1.41.0","1.40.0","1.39.0","1.38.0","1.37.0","1.36.0","1.35.0","1.34.0","1.33.0","1.32.0","1.31.0","1.30.0","1.29.0","1.28.0","1.27.0","1.26.0","1.25.0","1.24.0","1.23.0","1.22.0","1.21.0","1.20.0","1.19.0","1.18.0","1.17.2","1.17.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54734.json","vanir_signatures_modified":"2026-09-19T14:02:31Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java","function":"resolveHost"},"deprecated":false,"digest":{"length":109,"function_hash":"198447921365364417861485777795040228085"},"id":"CVE-2026-54734-04b0b1ef"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java","function":"resolveRequestUri"},"deprecated":false,"digest":{"function_hash":"325723664724250853215572684252335233220","length":2074},"id":"CVE-2026-54734-063eed4a","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java","function":"generateEndpointUrl"},"deprecated":false,"digest":{"function_hash":"295333946475127678786672498926198131380","length":317},"id":"CVE-2026-54734-0797b00a","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"205724428062441058202872864483192664522","length":119},"id":"CVE-2026-54734-102d8fbc","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java","function":"makeUrl"}},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"326024855955118129235369377191518692939","length":191},"id":"CVE-2026-54734-11331d16","signature_type":"Function"},{"target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java","function":"makeNurl"},"deprecated":false,"digest":{"function_hash":"194787928470760412672961016478124193125","length":857},"id":"CVE-2026-54734-1324c5b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"id":"CVE-2026-54734-140f5fdb","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"function_hash":"144137869402485534037224078968511650115","length":477}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"26448600067591417355506136156770850850","length":211},"id":"CVE-2026-54734-142327ce"},{"id":"CVE-2026-54734-15aba945","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java"},"deprecated":false,"digest":{"line_hashes":["87700735945997758033829849344141299097","339218012365580896802273216866556755635","236000992127398661739782014767637555194","249971000108541731010015487763347052945"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java"},"deprecated":false,"digest":{"line_hashes":["146697494684206715940510675132573813518","253105642484743772267297380002276822802","68372111596684274098760121848233765545","310813474359394882099381641455167007850","40396050193794252413835044607009416587","298186525586847102470680985214081235270","77511898461773031788743504831812358753","62593950908185012358943082808571655488"],"threshold":0.9},"id":"CVE-2026-54734-15c0cb6a"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"3378455433483132897279905891905439541","length":215},"id":"CVE-2026-54734-18a27c8d","signature_type":"Function"},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java"},"deprecated":false,"digest":{"line_hashes":["112819697576926354725468100793929029771","250836975833495129493346177154849106619","255261545408217889495219791354087419520","11629183222882135673023317539271404922"],"threshold":0.9},"id":"CVE-2026-54734-1aa50e45","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["136001721099932037486328626834258699535","243576997495737688952679671959555406552","317660394276845089465003731891791304134","137057400418208433334075007433650114448"],"threshold":0.9},"id":"CVE-2026-54734-1bca71de","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java"}},{"deprecated":false,"digest":{"function_hash":"254533809486248975939664102101385469292","length":779},"id":"CVE-2026-54734-1cd917ce","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java","function":"makeHttpRequests"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java"},"deprecated":false,"digest":{"line_hashes":["146697494684206715940510675132573813518","253105642484743772267297380002276822802","68372111596684274098760121848233765545","310813474359394882099381641455167007850","40396050193794252413835044607009416587","298186525586847102470680985214081235270","77511898461773031788743504831812358753","62593950908185012358943082808571655488"],"threshold":0.9},"id":"CVE-2026-54734-1d599b9c"},{"target":{"file":"src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"205724428062441058202872864483192664522","length":119},"id":"CVE-2026-54734-1d892492","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"100377217902792627159617800621781246916","length":253},"id":"CVE-2026-54734-1da0ed0b","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"198447921365364417861485777795040228085","length":109},"id":"CVE-2026-54734-1fcfd269","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java","function":"resolveHost"}},{"deprecated":false,"digest":{"function_hash":"168346161615168504659913106454530517854","length":347},"id":"CVE-2026-54734-24936d18","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java","function":"makeHttpRequest"}},{"deprecated":false,"digest":{"line_hashes":["96891567795429607972553436875316226459","80347162700628503559989309174905312558","104044911011898325354946748264802825005","305898780913344820149786594168584634026"],"threshold":0.9},"id":"CVE-2026-54734-24bda3dc","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java"}},{"deprecated":false,"digest":{"line_hashes":["281796986388989401111810648242374699747","270399037814911436693556139630287716864","334815980352883604591950754421619920823","134377952921509696062132129902810415979"],"threshold":0.9},"id":"CVE-2026-54734-253229e1","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java"}},{"digest":{"line_hashes":["149763479780531882255313046342807250097","83236961482920358345410020283779860708","302179611892479291889998832496286464532","106906292244498086149478812946151159288"],"threshold":0.9},"id":"CVE-2026-54734-2ac8cf7b","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"29446028831360784757693097899292670500","length":205},"id":"CVE-2026-54734-2c5bb8e7"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"function_hash":"123058305822297376937063137156821750501","length":354},"id":"CVE-2026-54734-30ea9667","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java"},"deprecated":false,"digest":{"line_hashes":["242722448560688849191711518731643548319","299195945793259733459796802137797842751","149299233698182657409850321328027009696","214953583269298819781877242131863551335","127963044079726698574853167651910855763"],"threshold":0.9},"id":"CVE-2026-54734-31e02486","signature_type":"Line"},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java","function":"createRequest"},"deprecated":false,"digest":{"function_hash":"287458201373627428624036341291997531923","length":340},"id":"CVE-2026-54734-3680c5b2","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java","function":"makeUrl"},"deprecated":false,"digest":{"function_hash":"72341183366717434413081854802403715889","length":447},"id":"CVE-2026-54734-3abdc54c"},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"110609896534169488318700426352848986206","length":122},"id":"CVE-2026-54734-3b4e3c13","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/blis/BlisBidder.java"},"deprecated":false,"digest":{"line_hashes":["316993446866107682171547612503971438711","31119820498014160639573297770224042671","205174457258449896167508470939380642029","260525916452780929599517775492611659771"],"threshold":0.9},"id":"CVE-2026-54734-3ff4d2f5"},{"deprecated":false,"digest":{"line_hashes":["49424013603908876118454151205962309013","31020292668360684537132318375577368833","46482676383564045127118004623936127776","252904503037920538881801907978078567877"],"threshold":0.9},"id":"CVE-2026-54734-42b41cd4","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java"}},{"digest":{"line_hashes":["136001721099932037486328626834258699535","243576997495737688952679671959555406552","317660394276845089465003731891791304134","137057400418208433334075007433650114448"],"threshold":0.9},"id":"CVE-2026-54734-4391e6b8","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java"},"deprecated":false},{"id":"CVE-2026-54734-4440530f","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/util/HttpUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["317404591423247720015642199692451731058","3793145171331165429434690006090147355","298265823188676952008800153207957321985","308176784227052409453534064267153662756","274392003005117655454855067371589433834","207043211942330825131371115835424927412","90557739612285363455176320688249836183","67937546297553063890684527440352315699","163022003313975206591207762109603683814","299553485261949254798471201003397790793","240940978578094480858070662416268548651","282421319596452170092220110712268313034","186551298168796781819288509982024283691","3674184820351419962543168409470832331","316082756977972663154626221818906020879","304738865407738277556743941914781096694","12692723895706965087413713377367197506","87269095160866608592830810009449839746","245616666025038579243003540223094357804","319552126412152631686109523745320596098","135827200962895167265495198867569770481"]}},{"id":"CVE-2026-54734-4a19d507","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java"},"deprecated":false,"digest":{"line_hashes":["65116636555740351431898515799888429094","270307274811751352984965522333900435330","24588467790106484326863934475953564293","142922705970595209841081558719327609334","106849073257160457822747482616470621103","318331261984344721415374111590964096526","26991442672704444071846730922812697485","33296918775852624317849476032703614434","186120461722454788613474245220441791801","69869946910786976897018462321503505077"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["291940056002300087666260752459208575227","199057242901083349961182577761151894383","131251461756365222899606563901058404489","254684418109396574834516152113184505751"],"threshold":0.9},"id":"CVE-2026-54734-4c0b06e9","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java"},"deprecated":false,"digest":{"line_hashes":["281796986388989401111810648242374699747","270399037814911436693556139630287716864","334815980352883604591950754421619920823","134377952921509696062132129902810415979"],"threshold":0.9},"id":"CVE-2026-54734-4d580954"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["236662444222671612515195600111011867063","51165247372708048648536827353614800359","225013417988127083474428733662943035690","78082207197644387512519239848967677147"]},"id":"CVE-2026-54734-4d650a3b"},{"deprecated":false,"digest":{"line_hashes":["285048521093033192642303219207626814896","316139895997989188964789859464311804411","311917238025105642837974257008881435510","290265896772489177430458972687959778442"],"threshold":0.9},"id":"CVE-2026-54734-4ea32f7c","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java"}},{"id":"CVE-2026-54734-5371d914","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java"},"deprecated":false,"digest":{"line_hashes":["240754367268061609145189909854840835880","9784352965043249190899240327764399197","4843623379826827927486382529397300008","297626583701050116432922887650842379405","155772693972373606110694454232418531668","282184938117357067000613221883438072870"],"threshold":0.9}},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["43665600410275707578680208388205300842","27544396753061894526652414708124033582","314374712536583102219258226918466999445","196363716389934998576644513528307667817"]},"id":"CVE-2026-54734-543635cd","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"160885591956734117579398150366617542522","length":336},"id":"CVE-2026-54734-544fbc8d","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"function":"makeHttpRequest","file":"src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java"}},{"deprecated":false,"digest":{"line_hashes":["23965597119713868139050266423445601545","163722236020575939422342485580015338352","136293212947507186558880791934948105372","189560417956647770526372575002094845494","117650743729868865563023395350469045663"],"threshold":0.9},"id":"CVE-2026-54734-557738a6","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java"}},{"id":"CVE-2026-54734-567cce4d","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java"},"deprecated":false,"digest":{"line_hashes":["160105606772227391233616234135486648295","205415514667796891906070016515694149297","202263242358628995810107902119071378143","112588629805774122905892225989848165238"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["1824989807651402443877033484465338296","169071625794028345851715364358895856895","84312448866803018228606672249270580030","20954636128091706107542023409339029838"],"threshold":0.9},"id":"CVE-2026-54734-589be445","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java"}},{"id":"CVE-2026-54734-58a79e27","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java"},"deprecated":false,"digest":{"line_hashes":["226457389172253057167073568243346691775","56285101208970615671662513163544755075","266197632045839666305158594419187915093","325396406536416029426755511109353708815"],"threshold":0.9}},{"deprecated":false,"digest":{"length":801,"function_hash":"47385572887920837459578368574515469034"},"id":"CVE-2026-54734-596c3b4d","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"function":"resolveUrl","file":"src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java"}},{"deprecated":false,"digest":{"line_hashes":["317404591423247720015642199692451731058","3793145171331165429434690006090147355","298265823188676952008800153207957321985","308176784227052409453534064267153662756","274392003005117655454855067371589433834","207043211942330825131371115835424927412","90557739612285363455176320688249836183","67937546297553063890684527440352315699","163022003313975206591207762109603683814","299553485261949254798471201003397790793","240940978578094480858070662416268548651","282421319596452170092220110712268313034","186551298168796781819288509982024283691","3674184820351419962543168409470832331","316082756977972663154626221818906020879","304738865407738277556743941914781096694","12692723895706965087413713377367197506","87269095160866608592830810009449839746","245616666025038579243003540223094357804","319552126412152631686109523745320596098","135827200962895167265495198867569770481"],"threshold":0.9},"id":"CVE-2026-54734-5cc0f8f1","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/util/HttpUtil.java"}},{"deprecated":false,"digest":{"line_hashes":["291940056002300087666260752459208575227","199057242901083349961182577761151894383","131251461756365222899606563901058404489","254684418109396574834516152113184505751"],"threshold":0.9},"id":"CVE-2026-54734-5d7e22be","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java"}},{"deprecated":false,"digest":{"line_hashes":["102091176806943416255698272611444713877","314694862789134794287612250850139325132","263579413504597827202990973029781798966","275975137270250295830793075226504214149"],"threshold":0.9},"id":"CVE-2026-54734-5da660d4","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java"}},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java"},"deprecated":false,"digest":{"line_hashes":["279706734337969711276944619508768803402","161697725069110479379988733867009487600","220446331542254187131624682695256021801","274499127956518883075628238087346483931"],"threshold":0.9},"id":"CVE-2026-54734-5eb059e4","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"length":907,"function_hash":"135173989252584053840293366035839628452"},"id":"CVE-2026-54734-62ff07e0","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"deprecated":false,"digest":{"line_hashes":["242722448560688849191711518731643548319","299195945793259733459796802137797842751","149299233698182657409850321328027009696","214953583269298819781877242131863551335","127963044079726698574853167651910855763"],"threshold":0.9},"id":"CVE-2026-54734-6571bcd5","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java"}},{"digest":{"function_hash":"29446028831360784757693097899292670500","length":205},"id":"CVE-2026-54734-6657ca5c","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java","function":"resolveEndpoint"},"deprecated":false},{"deprecated":false,"digest":{"length":207,"function_hash":"256844926046957464166368292841557472921"},"id":"CVE-2026-54734-6918c734","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java","function":"buildEndpointUrl"}},{"id":"CVE-2026-54734-699a0b35","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java"},"deprecated":false,"digest":{"line_hashes":["1824989807651402443877033484465338296","169071625794028345851715364358895856895","84312448866803018228606672249270580030","20954636128091706107542023409339029838"],"threshold":0.9}},{"target":{"file":"src/main/java/org/prebid/server/bidder/tappx/TappxBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"47385572887920837459578368574515469034","length":801},"id":"CVE-2026-54734-6b10f901","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"digest":{"function_hash":"48537107275402019844369628240305864536","length":109},"id":"CVE-2026-54734-6e3efc65","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java","function":"getUrl"},"deprecated":false},{"id":"CVE-2026-54734-6e600fb8","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"3378455433483132897279905891905439541","length":215}},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"function_hash":"280961168691186241361749293419903767916","length":503},"id":"CVE-2026-54734-7145c61c","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":779,"function_hash":"254533809486248975939664102101385469292"},"id":"CVE-2026-54734-71acd382","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/mgid/MgidBidder.java","function":"makeHttpRequests"}},{"id":"CVE-2026-54734-71ec7618","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/blis/BlisBidder.java"},"deprecated":false,"digest":{"line_hashes":["316993446866107682171547612503971438711","31119820498014160639573297770224042671","205174457258449896167508470939380642029","260525916452780929599517775492611659771"],"threshold":0.9}},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java"},"deprecated":false,"digest":{"line_hashes":["102737159447580504879788362789157601682","133831985419788942424348893577529945288","49043621337580601358404091147211999137","32079529768729969600705077064494453893"],"threshold":0.9},"id":"CVE-2026-54734-73dd11ce","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"68497262131827162889669658055090680917","length":112},"id":"CVE-2026-54734-74a6aa18","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java","function":"makeUrl"}},{"id":"CVE-2026-54734-754bea6e","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java"},"deprecated":false,"digest":{"line_hashes":["284525389009627087920079788720375447521","274749567923501967817816867020845355858","272156295723065797357338065558388908489","261871633965461541406672580108138526964","309044027783800481001122104576846632935","120958577524960861837488629084976667692","46650959388806193429793135960751516610","31809851903868605951313693569313306151"],"threshold":0.9}},{"target":{"file":"src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["154783082640643625416130065920291399597","155426378231096812109262559517797054728","146494589104229048388313421070746589344","159386282495881468776322017567054587719"]},"id":"CVE-2026-54734-76f12115","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java","function":"makeUrl"},"deprecated":false,"digest":{"function_hash":"29216014568223424093997818731502630757","length":2025},"id":"CVE-2026-54734-78bae141"},{"id":"CVE-2026-54734-791d7bc9","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java"},"deprecated":false,"digest":{"line_hashes":["120310285897101297882715487172042616125","148092361413001500524174258816662949372","142314189194569539848618597784506687604","101233969417393396275428510293374643777"],"threshold":0.9}},{"deprecated":false,"digest":{"length":112,"function_hash":"68497262131827162889669658055090680917"},"id":"CVE-2026-54734-7ae14cfa","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java","function":"makeUrl"}},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java"},"deprecated":false,"digest":{"line_hashes":["102091176806943416255698272611444713877","314694862789134794287612250850139325132","263579413504597827202990973029781798966","275975137270250295830793075226504214149"],"threshold":0.9},"id":"CVE-2026-54734-7b4dd5e7","signature_type":"Line"},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"length":354,"function_hash":"123058305822297376937063137156821750501"},"id":"CVE-2026-54734-7b864a85","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/test/java/org/prebid/server/util/HttpUtilTest.java"},"deprecated":false,"digest":{"line_hashes":["66239506392448446163199643802105469803","182021114749306458630970339781753541191","182817289163253521745380603197905290590","269053473226481069626940376561355821878","296192193233276416624489049893947052063","272468714868279221782383218660961864821","93379800141491797006434039502841204056","135240865330285176540098886699368230888","113791249148395039706340606711027523507","166777575091389150067891048782033268915","238637461712501048221300978659958259870"],"threshold":0.9},"id":"CVE-2026-54734-7bb4d0c6","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"247324315646467640816542430227826476576","length":183},"id":"CVE-2026-54734-7f051c76","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java","function":"resolveEndpoint"}},{"deprecated":false,"digest":{"length":907,"function_hash":"135173989252584053840293366035839628452"},"id":"CVE-2026-54734-815d3806","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java","function":"makeHttpRequests"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["329930066883069924688513157832667193257","83223479197167002041290363507781711378","153664693407880433505066021071052642492","93125674813456976799775912572197491787"]},"id":"CVE-2026-54734-82078d5f","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java"}},{"deprecated":false,"digest":{"function_hash":"288556246273132152855019877020787561785","length":140},"id":"CVE-2026-54734-832a7381","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java","function":"resolveEndpointUrl"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java"},"deprecated":false,"digest":{"line_hashes":["102737159447580504879788362789157601682","133831985419788942424348893577529945288","49043621337580601358404091147211999137","32079529768729969600705077064494453893"],"threshold":0.9},"id":"CVE-2026-54734-85b4ad17"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java"},"deprecated":false,"digest":{"line_hashes":["112902325360799230612885648091019814613","107542164348429930386550962850565994621","202974815435062298758687048207172576483","266801763609397430050950001887719019257"],"threshold":0.9},"id":"CVE-2026-54734-8c60490c","signature_type":"Line"},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["285048521093033192642303219207626814896","316139895997989188964789859464311804411","311917238025105642837974257008881435510","290265896772489177430458972687959778442"]},"id":"CVE-2026-54734-8d08242b","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java"},"deprecated":false,"digest":{"line_hashes":["340201439983668149886376724191984963115","9233763714860306532235912450274142321","30654964907167065863616065335850937239","52700347096312755101960062056881199581"],"threshold":0.9},"id":"CVE-2026-54734-918038e2","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"48537107275402019844369628240305864536","length":109},"id":"CVE-2026-54734-95c99ae6","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java","function":"getUrl"}},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java"},"deprecated":false,"digest":{"line_hashes":["329930066883069924688513157832667193257","83223479197167002041290363507781711378","153664693407880433505066021071052642492","93125674813456976799775912572197491787"],"threshold":0.9},"id":"CVE-2026-54734-964f25e4","signature_type":"Line","signature_version":"v1"},{"digest":{"line_hashes":["226457389172253057167073568243346691775","56285101208970615671662513163544755075","266197632045839666305158594419187915093","325396406536416029426755511109353708815"],"threshold":0.9},"id":"CVE-2026-54734-96f19ae4","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["311350018275977072247131705439571699162","329296835340038324082018210010208337319","300667061421920673392589571963419486282","77997134159007913893780145344292789064","97319979876619997879648818568689392133"],"threshold":0.9},"id":"CVE-2026-54734-974dbda6","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java"}},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"function_hash":"168346161615168504659913106454530517854","length":347},"id":"CVE-2026-54734-984c6775","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java"},"deprecated":false,"digest":{"line_hashes":["121298105389802982990679906507346813363","146131975686587381233418550934762506765","38430366634770192716303688219234802882","198420560176938766068501775266844806025"],"threshold":0.9},"id":"CVE-2026-54734-9873fa1e","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"deprecated":false,"digest":{"length":174,"function_hash":"299570797457617937038961068147666053535"},"id":"CVE-2026-54734-9926805a","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java","function":"makeHttpRequest"}},{"deprecated":false,"digest":{"line_hashes":["120310285897101297882715487172042616125","148092361413001500524174258816662949372","142314189194569539848618597784506687604","101233969417393396275428510293374643777"],"threshold":0.9},"id":"CVE-2026-54734-9d4cdd78","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java"}},{"digest":{"function_hash":"288556246273132152855019877020787561785","length":140},"id":"CVE-2026-54734-9e66a729","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/rediads/RediadsBidder.java","function":"resolveEndpointUrl"},"deprecated":false},{"digest":{"function_hash":"312351361871839404076036554235621223642","length":366},"id":"CVE-2026-54734-a0729691","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java","function":"createRequest"},"deprecated":false},{"target":{"file":"src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java"},"deprecated":false,"digest":{"line_hashes":["145387015834485738743647468463203512119","241768233704889487508255529968919804409","304983017390747410008135062765666450998","265967167399477038343542081623229961008"],"threshold":0.9},"id":"CVE-2026-54734-a1913231","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"digest":{"line_hashes":["112902325360799230612885648091019814613","107542164348429930386550962850565994621","202974815435062298758687048207172576483","266801763609397430050950001887719019257"],"threshold":0.9},"id":"CVE-2026-54734-a344262b","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java"},"deprecated":false},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"length":1279,"function_hash":"22740647234983536566213812310888417344"},"id":"CVE-2026-54734-a4398af7","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-54734-a6ae3d70","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"205724428062441058202872864483192664522","length":119}},{"deprecated":false,"digest":{"function_hash":"72341183366717434413081854802403715889","length":447},"id":"CVE-2026-54734-a6f0e39d","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java","function":"makeUrl"}},{"id":"CVE-2026-54734-a79efb98","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"326024855955118129235369377191518692939","length":191}},{"deprecated":false,"digest":{"line_hashes":["313202141399526773956506067566965006921","253460273662214469509539098522086228685","276811962962762363051278882047845439251","57523820587681780368144471924690803417"],"threshold":0.9},"id":"CVE-2026-54734-a7c44a00","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java"}},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java","function":"makeNurl"},"deprecated":false,"digest":{"function_hash":"194787928470760412672961016478124193125","length":857},"id":"CVE-2026-54734-ab28e1f3","signature_type":"Function"},{"digest":{"line_hashes":["13577048140726214241897356570783225510","338782550213323561654207341829378626398","274197013755635562132645404613869801308","142805594745531359282296112039545247256"],"threshold":0.9},"id":"CVE-2026-54734-b08a9d45","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/elementaltv/ElementalTVBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"26448600067591417355506136156770850850","length":211},"id":"CVE-2026-54734-b09e9d6c","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"function_hash":"22740647234983536566213812310888417344","length":1279},"id":"CVE-2026-54734-b2c46996"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"function_hash":"168346161615168504659913106454530517854","length":347},"id":"CVE-2026-54734-b8aaee53"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java"},"deprecated":false,"digest":{"line_hashes":["96891567795429607972553436875316226459","80347162700628503559989309174905312558","104044911011898325354946748264802825005","305898780913344820149786594168584634026"],"threshold":0.9},"id":"CVE-2026-54734-b9c0fa30","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"287458201373627428624036341291997531923","length":340},"id":"CVE-2026-54734-bd63ae03","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/kayzen/KayzenBidder.java","function":"createRequest"}},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["13577048140726214241897356570783225510","338782550213323561654207341829378626398","274197013755635562132645404613869801308","142805594745531359282296112039545247256"]},"id":"CVE-2026-54734-be5a0ff4","signature_type":"Line"},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/blis/BlisBidder.java","function":"makeUrl"},"deprecated":false,"digest":{"function_hash":"260377427731277464057841570865515101109","length":118},"id":"CVE-2026-54734-c0a62e63","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"144137869402485534037224078968511650115","length":477},"id":"CVE-2026-54734-c1bebc44","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/onetag/OnetagBidder.java","function":"makeHttpRequests"},"deprecated":false},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"function":"resolveEndpoint","file":"src/main/java/org/prebid/server/bidder/axonix/AxonixBidder.java"},"deprecated":false,"digest":{"length":122,"function_hash":"110609896534169488318700426352848986206"},"id":"CVE-2026-54734-c23e626d","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"168346161615168504659913106454530517854","length":347},"id":"CVE-2026-54734-c2a65a76","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java","function":"makeHttpRequest"}},{"deprecated":false,"digest":{"line_hashes":["284525389009627087920079788720375447521","274749567923501967817816867020845355858","272156295723065797357338065558388908489","261871633965461541406672580108138526964","309044027783800481001122104576846632935","120958577524960861837488629084976667692","46650959388806193429793135960751516610","31809851903868605951313693569313306151"],"threshold":0.9},"id":"CVE-2026-54734-c3f9540f","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/gamoshi/GamoshiBidder.java"}},{"deprecated":false,"digest":{"length":118,"function_hash":"260377427731277464057841570865515101109"},"id":"CVE-2026-54734-c46a5e9f","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/blis/BlisBidder.java","function":"makeUrl"}},{"source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/operaads/OperaadsBidder.java"},"deprecated":false,"digest":{"line_hashes":["49424013603908876118454151205962309013","31020292668360684537132318375577368833","46482676383564045127118004623936127776","252904503037920538881801907978078567877"],"threshold":0.9},"id":"CVE-2026-54734-c4fafc64","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-54734-c6a309c9","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java"},"deprecated":false,"digest":{"line_hashes":["160105606772227391233616234135486648295","205415514667796891906070016515694149297","202263242358628995810107902119071378143","112588629805774122905892225989848165238"],"threshold":0.9}},{"id":"CVE-2026-54734-c7b20e13","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java","function":"makeUrl"},"deprecated":false,"digest":{"function_hash":"29216014568223424093997818731502630757","length":2025}},{"id":"CVE-2026-54734-c9474dd6","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/roulax/RoulaxBidder.java","function":"resolveEndpoint"},"deprecated":false,"digest":{"function_hash":"100377217902792627159617800621781246916","length":253}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/zeroclickfraud/ZeroclickfraudBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"function_hash":"160885591956734117579398150366617542522","length":336},"id":"CVE-2026-54734-c9f3dbd0"},{"deprecated":false,"digest":{"line_hashes":["23965597119713868139050266423445601545","163722236020575939422342485580015338352","136293212947507186558880791934948105372","189560417956647770526372575002094845494","117650743729868865563023395350469045663"],"threshold":0.9},"id":"CVE-2026-54734-ce2b6036","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/ownadx/OwnAdxBidder.java"}},{"target":{"file":"src/main/java/org/prebid/server/bidder/tradplus/TradPlusBidder.java"},"deprecated":false,"digest":{"line_hashes":["311350018275977072247131705439571699162","329296835340038324082018210010208337319","300667061421920673392589571963419486282","77997134159007913893780145344292789064","97319979876619997879648818568689392133"],"threshold":0.9},"id":"CVE-2026-54734-cef88562","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"id":"CVE-2026-54734-d3ed496c","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/adtonos/AdtonosBidder.java"},"deprecated":false,"digest":{"line_hashes":["340201439983668149886376724191984963115","9233763714860306532235912450274142321","30654964907167065863616065335850937239","52700347096312755101960062056881199581"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java","function":"resolveUrl"},"deprecated":false,"digest":{"function_hash":"263171267421688729582633180995264582898","length":273},"id":"CVE-2026-54734-d51026cd"},{"target":{"file":"src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java","function":"makeUrl"},"deprecated":false,"digest":{"function_hash":"274990817751974975259969025553543368873","length":218},"id":"CVE-2026-54734-d6c4e621","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java"},"deprecated":false,"digest":{"line_hashes":["154783082640643625416130065920291399597","155426378231096812109262559517797054728","146494589104229048388313421070746589344","159386282495881468776322017567054587719"],"threshold":0.9},"id":"CVE-2026-54734-d8e60778"},{"digest":{"function_hash":"274990817751974975259969025553543368873","length":218},"id":"CVE-2026-54734-d918aaa1","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/relevantdigital/RelevantDigitalBidder.java","function":"makeUrl"},"deprecated":false},{"digest":{"line_hashes":["112819697576926354725468100793929029771","250836975833495129493346177154849106619","255261545408217889495219791354087419520","11629183222882135673023317539271404922"],"threshold":0.9},"id":"CVE-2026-54734-d98bf341","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java"},"deprecated":false},{"digest":{"line_hashes":["65116636555740351431898515799888429094","270307274811751352984965522333900435330","24588467790106484326863934475953564293","142922705970595209841081558719327609334","106849073257160457822747482616470621103","318331261984344721415374111590964096526","26991442672704444071846730922812697485","33296918775852624317849476032703614434","186120461722454788613474245220441791801","69869946910786976897018462321503505077"],"threshold":0.9},"id":"CVE-2026-54734-d9d1a395","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/yieldlab/YieldlabBidder.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adhese/AdheseBidder.java"},"deprecated":false,"digest":{"line_hashes":["149763479780531882255313046342807250097","83236961482920358345410020283779860708","302179611892479291889998832496286464532","106906292244498086149478812946151159288"],"threshold":0.9},"id":"CVE-2026-54734-daa0f27b","signature_type":"Line"},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/clydo/ClydoBidder.java"},"deprecated":false,"digest":{"line_hashes":["121298105389802982990679906507346813363","146131975686587381233418550934762506765","38430366634770192716303688219234802882","198420560176938766068501775266844806025"],"threshold":0.9},"id":"CVE-2026-54734-dcbeb9e2","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/main/java/org/prebid/server/bidder/ucfunnel/UcfunnelBidder.java"},"deprecated":false,"digest":{"line_hashes":["279706734337969711276944619508768803402","161697725069110479379988733867009487600","220446331542254187131624682695256021801","274499127956518883075628238087346483931"],"threshold":0.9},"id":"CVE-2026-54734-dcd5a21a","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/madvertise/MadvertiseBidder.java","function":"createRequest"},"deprecated":false,"digest":{"function_hash":"312351361871839404076036554235621223642","length":366},"id":"CVE-2026-54734-e1c727ec"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/acuityads/AcuityadsBidder.java"},"deprecated":false,"digest":{"line_hashes":["236662444222671612515195600111011867063","51165247372708048648536827353614800359","225013417988127083474428733662943035690","78082207197644387512519239848967677147"],"threshold":0.9},"id":"CVE-2026-54734-e3f56149"},{"deprecated":false,"digest":{"function_hash":"325723664724250853215572684252335233220","length":2074},"id":"CVE-2026-54734-e5d6d19e","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/eplanning/EplanningBidder.java","function":"resolveRequestUri"}},{"deprecated":false,"digest":{"function_hash":"263171267421688729582633180995264582898","length":273},"id":"CVE-2026-54734-e647b251","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java","function":"resolveUrl"}},{"deprecated":false,"digest":{"line_hashes":["324170616292993979031833644566802058840","77825270456680289990672519234987375722","304983017390747410008135062765666450998","265967167399477038343542081623229961008"],"threshold":0.9},"id":"CVE-2026-54734-e76aa53d","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java"}},{"digest":{"length":188,"function_hash":"147872984151634023741940616129085953688"},"id":"CVE-2026-54734-e7cf5ff8","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java","function":"resolveEndpoint"},"deprecated":false},{"digest":{"function_hash":"205724428062441058202872864483192664522","length":119},"id":"CVE-2026-54734-e932c6d9","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/contxtful/ContxtfulBidder.java","function":"makeUrl"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java","function":"buildEndpointUrl"},"deprecated":false,"digest":{"function_hash":"256844926046957464166368292841557472921","length":207},"id":"CVE-2026-54734-ef0085ca"},{"id":"CVE-2026-54734-f1ac10eb","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/kueezrtb/KueezRtbBidder.java"},"deprecated":false,"digest":{"line_hashes":["145387015834485738743647468463203512119","241768233704889487508255529968919804409","304983017390747410008135062765666450998","265967167399477038343542081623229961008"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"147872984151634023741940616129085953688","length":188},"id":"CVE-2026-54734-f1bd0ebd","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/silvermob/SilvermobBidder.java","function":"resolveEndpoint"}},{"deprecated":false,"digest":{"line_hashes":["240754367268061609145189909854840835880","9784352965043249190899240327764399197","4843623379826827927486382529397300008","297626583701050116432922887650842379405","155772693972373606110694454232418531668","282184938117357067000613221883438072870"],"threshold":0.9},"id":"CVE-2026-54734-f46e9862","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/bidmachine/BidmachineBidder.java"}},{"source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c","target":{"file":"src/main/java/org/prebid/server/bidder/yeahmobi/YeahmobiBidder.java","function":"makeHttpRequest"},"deprecated":false,"digest":{"function_hash":"299570797457617937038961068147666053535","length":174},"id":"CVE-2026-54734-f69cd704","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/main/java/org/prebid/server/bidder/trafficgate/TrafficGateBidder.java"},"deprecated":false,"digest":{"line_hashes":["87700735945997758033829849344141299097","339218012365580896802273216866556755635","236000992127398661739782014767637555194","249971000108541731010015487763347052945"],"threshold":0.9},"id":"CVE-2026-54734-f76ba0fa","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/adview/AdviewBidder.java"},"deprecated":false,"digest":{"line_hashes":["313202141399526773956506067566965006921","253460273662214469509539098522086228685","276811962962762363051278882047845439251","57523820587681780368144471924690803417"],"threshold":0.9},"id":"CVE-2026-54734-f94d876f","signature_type":"Line"},{"id":"CVE-2026-54734-fadb222a","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/vidazoo/VidazooBidder.java"},"deprecated":false,"digest":{"line_hashes":["324170616292993979031833644566802058840","77825270456680289990672519234987375722","304983017390747410008135062765666450998","265967167399477038343542081623229961008"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"247324315646467640816542430227826476576","length":183},"id":"CVE-2026-54734-fbfbec1f","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/thetradedesk/TheTradeDeskBidder.java","function":"resolveEndpoint"}},{"target":{"file":"src/main/java/org/prebid/server/bidder/smilewanted/SmileWantedBidder.java","function":"makeHttpRequests"},"deprecated":false,"digest":{"function_hash":"280961168691186241361749293419903767916","length":503},"id":"CVE-2026-54734-fc5d36f9","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/d0c723ce36aa09712c825ea9625d978f45d29a1c"},{"digest":{"function_hash":"295333946475127678786672498926198131380","length":317},"id":"CVE-2026-54734-fe08bff2","signature_type":"Function","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/imds/ImdsBidder.java","function":"generateEndpointUrl"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["43665600410275707578680208388205300842","27544396753061894526652414708124033582","314374712536583102219258226918466999445","196363716389934998576644513528307667817"],"threshold":0.9},"id":"CVE-2026-54734-fec0a739","signature_type":"Line","signature_version":"v1","source":"https://github.com/prebid/prebid-server-java/commit/a129a685b6fc54441c1a779ce29ea4ec20c2e09f","target":{"file":"src/main/java/org/prebid/server/bidder/smartyads/SmartyAdsBidder.java"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}]}