{"action":"Upgrade de.themoep:inventorygui to 1.6.4-SNAPSHOT or later.","affected":[{"fixed":"1.6.4-SNAPSHOT","introduced":"0"}],"component":"de.themoep:inventorygui","cve_ids":["CVE-2025-62782"],"ecosystem":"Maven","epss":0.00261,"exploited":false,"fixed_versions":["1.6.4-SNAPSHOT"],"ghsa_id":"GHSA-rgvh-4m82-fvjq","id":"tcs_01M5N9BW28X668Y5TRPXDDD263","modified_at":"2025-10-27T22:32:04Z","published_at":"2025-10-27T20:12:50Z","references":["https://osv.dev/vulnerability/GHSA-rgvh-4m82-fvjq","https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-rgvh-4m82-fvjq","https://nvd.nist.gov/vuln/detail/CVE-2025-62782","https://github.com/Phoenix616/InventoryGui/issues/51","https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494","https://github.com/Phoenix616/InventoryGui"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rgvh-4m82-fvjq","url":"https://osv.dev/vulnerability/GHSA-rgvh-4m82-fvjq"},{"source":"nvd","source_id":"CVE-2025-62782","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62782"}],"summary":"InventoryGui allows item duplication with experimental \"Bundle\" item in GUIs which use GuiStorageElement"}