CVE-2026-27492
1 advisory.
npm/lettermint CVE-2026-27492: medium 4.7, EPSS 0.18%
Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused
Action: Upgrade lettermint to 1.5.1 or later.
npm i lettermint@1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GHSA-49pc-8936-wvfp
- https://github.com/lettermint/lettermint-node/security/advisories/GHSA-49pc-8936-wvfp
- https://nvd.nist.gov/vuln/detail/CVE-2026-27492
- https://github.com/lettermint/lettermint-node/commit/24a17acbc2429c5eb30391f9df3dc0ea7aaf4de1
- https://github.com/lettermint/lettermint-node
- https://github.com/lettermint/lettermint-node/blob/main/CHANGELOG.md#151-2026-02-20
CVE-2026-27492 · published · modified · JSON