CVE-2025-62782

Summary: InventoryGui (a Bukkit/Spigot plug‑in library) contains a vulnerability in versions 1.6.3-SNAPSHOT and earlier where GUIs using GuiStorageElement can cause item duplication when the experimental Bundle item feature is enabled. The issue is resolved in version 1.6.4-SNAPSHOT. What is affe...

InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement

Impact Any plugin using the GuiStorageElement is impacted when used on a server which allows the currently experimental Bundle items. Patches Patched with https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494 "backported" to 1.6.3-SNAPSHOT Update to...