https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:17:46.311234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256997 EUVD-2026-256997 2026-10-06T15:17:46.360745+00:00 EUVD-2026-256997 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62784 fkie_cve-2025-62784 2026-10-06T15:17:46.360783+00:00

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5.

 https://cve.radiocsirt.org/vuln/ghsa-7whh-79j3-7c55 GHSA-7whh-79j3-7c55 — InventoryGui allows item duplication in GUIs which use GuiStorageElement 2026-10-06T15:17:46.360816+00:00

Affected: Maven: de.themoep:inventorygui

### Impact Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.

### Patches InventoryGui 1.6.5 (included in latest 1.6.5-SNAPSHOT) by disabling GuiStorageElement when not running on 1.21.9 or later.

### Workarounds Not using the GuiStorageElement.