llm 0.37.2
Release: llm 0.37.2 Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w . LLM has a mechanism called extra-openai-models.yaml - now managed by the new-in-0.37 llm openai endpoint add command - for using LLM with OpenAI-compatible API endpoints from other providers. Daniel reported two ways this could accidentally send your configured OpenAI API key to one of those providers: if the key named by api_key_name had never been stored, or if a responses:
阅读原始来源
来源记录
研究分析
来源记录
来源描述：Release: llm 0.37.2 Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w . LLM has a mechanism called extra-openai-models.yaml - now managed by the new-in-0.37 llm openai endpoint add command - for using LLM with OpenAI-compatible API endpoints from other providers. Daniel reported two ways this could accidentally send your configured OpenAI API key to one of those providers: if the key named by api_key_name had never been stored, or if a responses:
现有背景
可供比较的近期同类记录：“[程序员] codex tibo 说重置，我还没收到，你们呢？” (V2EX, 2026年11月12日)；“8-K - iANTHUS CAPITAL HOLDINGS, INC. (0001643154) (Filer)” (SEC EDGAR, 2026年11月12日)。主题相近仅用于导航，未核验其是否属于同一需求或独立证据。
研究状态
这条记录尚不能可靠归入主类，未生成商业或性能结论。
缺失证据
需要核验主要事件、受影响对象与原始证据。
下一步
阅读原文，明确它支持什么决策，再选择对应分析框架。