Prebid Universal Creative
Approved changes feed: RSS · Atom
cpe:2.3:a:prebid:prebid-universal-creative:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Prebid (1c73ab45-3100-53bb-9f84-99441f7e3c2f) |
|---|---|
| Product | Prebid Universal Creative (e02f0c31-4d1c-53f3-b471-24dbe3d3d65e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59039 |
vulnerable | 2026-06-08 07:35:19.928360 |
Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should see Prebid.js 9 release notes for suggestions on moving off the deprecated workflow of using the PUC or pointing to a dynamic version of it. PUC users pointing to latest should transition to 1.17.2 as soon as possible to avoid similar attacks in the future.
Published: 2025-09-09T22:23:55.551Z
Updated: 2025-09-10T18:00:27.573Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.