InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the `GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.2-SNAPSHOT.
Advisories
Source ID Title
Github GHSA Github GHSA GHSA-598q-jw82-5w66 InventoryGui affected by item duplication in GUIs which use GuiStorageElement
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 27 Oct 2025 21:00:00 +0000

Type Values Removed Values Added
Description InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the `GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.2-SNAPSHOT.
Title InventoryGui affected by item duplication in GUIs which use GuiStorageElement
Weaknesses CWE-837
References
Metrics cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-10-27T20:54:36.254Z

Reserved: 2025-10-22T18:55:48.008Z

Link: CVE-2025-62783

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-10-27T21:15:38.450

Modified: 2025-10-27T21:15:38.450

Link: CVE-2025-62783

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.