---
format: "aidr-story-markdown/v1"
id: "460872e68e9eeabbb2b493e0fd5d9bb2f3c3120a59dddc8c9d92c69c64b3475c"
canonical_url: "https://aidr.today/460872e6?lang=en"
title: "llm 0.37.2"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-11-11T17:19:52.000Z"
category: "Open Source"
topics: ["openai","llm","open-source"]
source_urls: ["https://simonwillison.net/2026/Nov/11/llm/"]
summary: "llm 0.37.2 was released to fix a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w. The fix involves managing the extra-openai-models.yaml mechanism via the new-in-0.37 llm openai endpoint add command. Daniel reported two ways the configured OpenAI API key could be accidentally sent to other providers."
---

# llm 0\.37\.2

> [Open the canonical story](<https://aidr.today/460872e6?lang=en>)

**Published:** 2026-11-11T17:19:52.000Z
**Category:** Open Source
**Topics:** openai, llm, open\-source

## Summary

llm 0\.37\.2 was released to fix a security issue reported by Daniel de Araujo in GHSA\-v9h7\-jj4g\-f862 and GHSA\-r639\-rr7r\-x72w\. The fix involves managing the extra\-openai\-models\.yaml mechanism via the new\-in\-0\.37 llm openai endpoint add command\. Daniel reported two ways the configured OpenAI API key could be accidentally sent to other providers\.

## Sources

- [Story source](<https://simonwillison.net/2026/Nov/11/llm/>)