GHSA-7whh-79j3-7c55
InventoryGui allows item duplication in GUIs which use GuiStorageElement
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | de.themoep:inventorygui | < 1.6.5 | 1.6.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.
### Patches
InventoryGui 1.6.5 (included in latest 1.6.5-SNAPSHOT) by disabling GuiStorageElement when not running on 1.21.9 or later.
### Workarounds
Not using the GuiStorageElement.
References
External links from the advisory. They lead to third-party sites.