GitHub Advisoryadvisory · Maven

GHSA-598q-jw82-5w66 InventoryGui affected by item duplication in GUIs which use GuiStorageElement

MEDIUM Published 2025-10-27 Modified 2025-10-27 Official page ↗
Aliases
CVE-2025-62783
Ecosystem
Maven
Packages
de.themoep:inventorygui
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-754, CWE-837
Reviewed
2025-10-27

Affected packages

• Maven de.themoep:inventorygui: < 1.6.2-SNAPSHOT → fixed in 1.6.2-SNAPSHOT

Description

Impact Any plugin using the `GuiStorageElement` is impacted. Patches Patched with https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 ("backported" to 1.6.1-SNAPSHOT) Update to 1.6.2-SNAPSHOT to guarantee that it's included! Workarounds Don't use the `GuiStorageElement` in GUIs. References Original issue: https://github.com/Phoenix616/InventoryGui/issues/48

Related

Alias · CVE (1)

  • CVE-2025-62783 InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. vulnerability

Weakness · CWE (2)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness
  • CWE-837 Improper Enforcement of a Single, Unique Action weakness

References