{"id":"GHSA-598q-jw82-5w66","summary":"InventoryGui affected by item duplication in GUIs which use GuiStorageElement","details":"### Impact\nAny plugin using the `GuiStorageElement` is impacted.\n\n### Patches\nPatched with https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 (\"backported\" to 1.6.1-SNAPSHOT) Update to 1.6.2-SNAPSHOT to guarantee that it's included!\n\n### Workarounds\nDon't use the `GuiStorageElement` in GUIs.\n\n### References\nOriginal issue: https://github.com/Phoenix616/InventoryGui/issues/48","aliases":["CVE-2025-62783"],"modified":"2025-10-27T22:31:55Z","published":"2025-10-27T20:12:31Z","database_specific":{"github_reviewed_at":"2025-10-27T20:12:31Z","nvd_published_at":"2025-10-27T21:15:38Z","cwe_ids":["CWE-754","CWE-837"],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-598q-jw82-5w66"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62783"},{"type":"WEB","url":"https://github.com/Phoenix616/InventoryGui/issues/48"},{"type":"WEB","url":"https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029"},{"type":"PACKAGE","url":"https://github.com/Phoenix616/InventoryGui"}],"affected":[{"package":{"name":"de.themoep:inventorygui","ecosystem":"Maven","purl":"pkg:maven/de.themoep/inventorygui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-SNAPSHOT"}]}],"database_specific":{"last_known_affected_version_range":"\u003c= 1.6.1-SNAPSHOT","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-598q-jw82-5w66/GHSA-598q-jw82-5w66.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N"}]}