InventoryGui vulnerabilities

The InventoryGui library for creating chest GUIs for Bukkit/Spigot plugins, in versions before 1.6.5, contains a vulnerability where any plugin using a GUI with the GuiStorageElement and allowing taking out items can allow item duplication when the experimental Bundle item feature is enabled. The vulnerability is resolved in version 1.6.5.

InventoryGui library up to version 1.6.1-SNAPSHOT allows item duplication in any plugin using GuiStorageElement when the experimental Bundle item feature is enabled on the server. The vulnerability is fixed in version 1.6.2-SNAPSHOT.

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server.