Security Advisories์ถ์ฒ: GitHub Security Advisories์กฐํ์ 12
[lettermint] Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused
By GitHub2026๋
2์ 21์ผ
**[lettermint] Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused**
Impact Email properties (such as to, subject, html, text, and attachments) are not reset between sends when a single client instance is reused across multiple .send() calls. This can cause properties from a previous send to leak into a subsequent one, potentially delivering content or recipient addresses to unintended parties. Applications sending emails to different recipients in sequence โ such as transactional flows like password resets or notifications โ are affected. Patches Yes, the issue has been patched. Users should upgrade to v1.5.1 or later...
---
**[devsupporter ํด์ค]**
์ด ๊ธฐ์ฌ๋ GitHub Security Advisories์์ ์ ๊ณตํ๋ ์ต์ ๊ฐ๋ฐ ๋ํฅ์ ๋๋ค. ๊ด๋ จ ๋๊ตฌ๋ ๊ธฐ์ ์ ๋ํด ๋ ์์๋ณด์๋ ค๋ฉด ์๋ณธ ๋งํฌ๋ฅผ ์ฐธ๊ณ ํ์ธ์.
Impact Email properties (such as to, subject, html, text, and attachments) are not reset between sends when a single client instance is reused across multiple .send() calls. This can cause properties from a previous send to leak into a subsequent one, potentially delivering content or recipient addresses to unintended parties. Applications sending emails to different recipients in sequence โ such as transactional flows like password resets or notifications โ are affected. Patches Yes, the issue has been patched. Users should upgrade to v1.5.1 or later...
---
**[devsupporter ํด์ค]**
์ด ๊ธฐ์ฌ๋ GitHub Security Advisories์์ ์ ๊ณตํ๋ ์ต์ ๊ฐ๋ฐ ๋ํฅ์ ๋๋ค. ๊ด๋ จ ๋๊ตฌ๋ ๊ธฐ์ ์ ๋ํด ๋ ์์๋ณด์๋ ค๋ฉด ์๋ณธ ๋งํฌ๋ฅผ ์ฐธ๊ณ ํ์ธ์.
![[lettermint] Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused](/assets/images/github_com_1771632182295.png)