CVE-2025-62784
NoneInventoryGui allows item duplication in GUIs which use GuiStorageElement
CVSS
—
EPSS
0.2%
Published
Oct 28, 2025
CISA due date
—
The record
Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | de.themoep:inventorygui | 0 | 1.6.5 |
Related vulnerabilities
- CVE-2025-62783 InventoryGui affected by item duplication in GUIs which use GuiStorageElement Also affects de.themoep:inventorygui
- CVE-2025-62782 InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use… Also affects de.themoep:inventorygui
- CVE-2026-86198 PocketMine-MP versions before 5.44.2 fail to properly validate multiple… CWE-837
- CVE-2026-45734 MyBB is free and open source forum software. CWE-837
- CVE-2026-42609 Grav is a file-based Web platform. CWE-837
- CVE-2026-44601 Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client… CWE-837
- CVE-2024-11716 While assignment of a user to a team (bracket) in CTFd should be possible only once, at… CWE-837
- CVE-2026-38739 ezsystems/ezpublish-legacy has a SQL injection in dfscleanup CWE-937