GHSA-598q-jw82-5w66

InventoryGui affected by item duplication in GUIs which use GuiStorageElement

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-62783

Packages

Ecosystem	Package	Affected	Fixed in
Maven	de.themoep:inventorygui	< 1.6.2-SNAPSHOT	1.6.2-SNAPSHOT

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Any plugin using the `GuiStorageElement` is impacted. ### Patches Patched with https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 ("backported" to 1.6.1-SNAPSHOT) Update to 1.6.2-SNAPSHOT to guarantee that it's included! ### Workarounds Don't use the `GuiStorageElement` in GUIs. ### References Original issue: https://github.com/Phoenix616/InventoryGui/issues/48

References

External links from the advisory. They lead to third-party sites.

https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-598q-jw82-5w66 web
https://nvd.nist.gov/vuln/detail/CVE-2025-62783 advisory
https://github.com/Phoenix616/InventoryGui/issues/48 web
https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 web
https://github.com/Phoenix616/InventoryGui package