Observed Signal · Sep 28, 2026 · Technical Release · Source: https://github.com/prebid/Prebid.js/releases.atom · Impact: 3/5 · Sentiment: Neutral

Prebid.js 11.36.0 released with security fixes

Executive Signal Summary

Prebid.js released version 11.36.0 on September 28, 2026. This maintenance release includes two core PRs: sanitizing untrusted ORTB responses to enhance security, and resetting GPT targeting on bid win. Several bidder adapters (Pubstack, Ogury, msft, AdSpirit, MCodeMedia, SSP Geniee) received fixes and updates. A notable change is the refactoring of bidder COPPA config access across various adapters. The update also includes documentation updates for IntentIq ID and a name change for MCodeMedia. These changes aim to improve stability, security, and compliance for publishers using Prebid.js.

Polaris7 AgentPolaris7 Strategic Assessment
High Confidence

Prebid.js is a widely used open-source header bidding wrapper. Security and stability fixes are important for the AdTech ecosystem, but this is a routine maintenance release without major feature changes.

SIGNAL RADAR

Track Pubstack Signals & Market Shifts in Real-Time

Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.

Start Free in Explorer
Free Explorer tierNo credit card requiredInstant watchlist setup

Key Takeaways & Evidence Grounding

  • Prebid.js 11.36.0 was released on September 28, 2026.
  • The release includes core PRs for sanitizing untrusted ORTB responses and resetting GPT targeting on bid win.
  • Multiple bidder adapters (Pubstack, Ogury, msft, AdSpirit, MCodeMedia, SSP Geniee) received fixes and updates.
  • COPPA config access was refactored across various bidder adapters.
  • IntentIq ID documentation was updated.

Connected Companies & Entities

5 Entities mapped

Ontology Mapping & Concepts

Primary Source Grounding & Direct Attribution
Direct Origin Attribution
Primary Reporting: https://github.com/prebid/Prebid.js/releases.atom•Published: Sep 28, 2026
Original Coverage Title: “Release Prebid 11.36.0 Release · prebid/Prebid.js”

Related Market Signals & Shifts

Recent verified developments and strategic activity across this market segment.

Header BiddingApr 29, 2026

Prebid.js 11.9.0 Released

Prebid.js published release 11.9.0 on 2026-04-29 (tagged via GitHub Actions). The release adds new features including an Encypher RTD provider that surfaces C2PA content provenance signals, multiple new bid adapters (goadserver, mtc, tne_catalyst), and a pgamdirect analytics adapter. It also introduces an option in GPP control modules to further restrict activities. The update contains a core bug fix limiting mergeConfig notifications to updated topics and several maintenance changes: disabling user syncs in Firefox and WebKit-based Chrome, build-system migrations (native Gulp v5 sourcemap handling, webpack source-map changes), adapter improvements (GumGum, Vidazoo, Mile, Showheroes, Limelight), and dependency bumps. The release is relevant to publishers, header-bidding integrators and ad-tech implementers managing Prebid.js builds and privacy/consent flows.

Read assessment
Header BiddingApr 15, 2026

Prebid.js 11.6.0 Released

Prebid.js published version 11.6.0, introducing new features, adapters, bug fixes and maintenance updates. Notable additions include a new core API method pbjs.getBidResponseByAdId, the initial release of an Agentic Audiences RTD module, and two new bidder adapters (AppMonstaMedia and AdSmartx). The release also contains bug fixes (TTL purge timer), build-system updates (Node 24, mocha bumped to 11.x), and several adapter-specific improvements such as instream support, single-request-per-auction behavior, and support for custom cohort handling.

Read assessment
Header BiddingJun 4, 2026

Prebid.js 11.15.0 Released

Prebid.js v11.15.0 was released on 2026-06-04 via the prebid/Prebid.js GitHub repository. The release includes core PRs (consent/legal-basis improvements, bid desirability adjustment, and enforcement of accessRequestCredentials), new features and adapters (Vuukle ortbConverter rewrite with video/native and new endpoint; Hubvisor analytics adapter; new ferio adapter; Ogury instream video support; Acxiom realid userID module), multiple bug fixes (including Criteo Id System and hb_cache_host fixes), and a range of maintenance updates across many bid adapters, identity modules and build/test tooling. Source archives (zip and tar.gz) were published with the tag.

Read assessment

Track Real-Time Market Signals & Shifts

Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.