CVE-2025-62784: InventoryGui allows item duplication in GUIs which use GuiStorageElement

October 28, 2025

Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.

References

github.com/Phoenix616/InventoryGui
github.com/Phoenix616/InventoryGui/commit/690fc91d137c6cc04f6ed3a89449050964dd8cb9
github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7whh-79j3-7c55
github.com/advisories/GHSA-7whh-79j3-7c55
nvd.nist.gov/vuln/detail/CVE-2025-62784

Code Behaviors & Features

Detect and mitigate CVE-2025-62784 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →