PT-2025-45683 · Maven · De.Themoep:Inventorygui

Published 2025-10-28 · Updated 2025-10-28

OSV

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Impact

Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.

Patches

InventoryGui 1.6.5 (included in latest 1.6.5-SNAPSHOT) by disabling GuiStorageElement when not running on 1.21.9 or later.

Workarounds

Not using the GuiStorageElement.

Fix

Weakness Enumeration

CWE-837

Related Identifiers

GHSA-7WHH-79J3-7C55

Affected Products

De.Themoep:Inventorygui

References · 5

• https://osv.dev/vulnerability/GHSA-7whh-79j3-7c55 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62784 · Security Note
• https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7whh-79j3-7c55 · Note
• https://github.com/Phoenix616/InventoryGui/commit/690fc91d137c6cc04f6ed3a89449050964dd8cb9 · Note
• https://github.com/Phoenix616/InventoryGui · Note