# llm 0.37.2

- Source: Simon Willison (LLMs)
- Published: 2026-11-11T17:19:52+00:00
- Category: Tech
- Original: https://simonwillison.net/2026/Nov/11/llm/
- Canonical: https://groundlevelnews.com/story/llm-0-37-2-d7c77e/

Release: llm 0.37.2 Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w . LLM has a mechanism called extra-openai-models.yaml - now managed by the new-in-0.37 llm openai endpoint add command - for using LLM with OpenAI-compatible API endpoints from other providers. Daniel reported two ways this could accidentally send your configured OpenAI API key to

_Ground Level News shows a short summary only; the full article and all rights belong to Simon Willison (LLMs)._