What is GHSA-598q-jw82-5w66?

GHSA-598q-jw82-5w66 is a security advisory published by GitHub Security Advisories with Medium severity. InventoryGui affected by item duplication in GUIs which use GuiStorageElement

Which CVE IDs does GHSA-598q-jw82-5w66 cover?

GHSA-598q-jw82-5w66 covers the following CVE IDs: CVE-2025-62783. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-598q-jw82-5w66?

GHSA-598q-jw82-5w66 has a CVSS v3 base score of 5.0, published by GitHub Security Advisories.

Which products are affected by GHSA-598q-jw82-5w66?

GHSA-598q-jw82-5w66 affects 1 product, including: maven/de.themoep:inventorygui:\u003c= 1.6.1-SNAPSHOT.

GHSA-598q-jw82-5w66MediumCVSS 5.0

InventoryGui affected by item duplication in GUIs which use GuiStorageElement

Vendor

GitHub Security Advisories

Published

October 27, 2025

Last Modified

October 27, 2025

🔗 CVE IDs covered (1)

CVE-2025-62783 →

📋 Description

Impact

Any plugin using the GuiStorageElement is impacted.

Patches

Patched with https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 ("backported" to 1.6.1-SNAPSHOT) Update to 1.6.2-SNAPSHOT to guarantee that it's included!

Workarounds

Don't use the GuiStorageElement in GUIs.

References

Original issue: https://github.com/Phoenix616/InventoryGui/issues/48

🎯 Affected products1

maven/de.themoep:inventorygui:<= 1.6.1-SNAPSHOT

🔗 References (5)

https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-598q-jw82-5w66
https://github.com/Phoenix616/InventoryGui/issues/48
https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029
https://nvd.nist.gov/vuln/detail/CVE-2025-62783
https://github.com/advisories/GHSA-598q-jw82-5w66