Skip to content
Trending storyDeveloping

LLM 0.37.2 fixes two bugs that could leak OpenAI API keys to other providers

1 article1 sourcesince Nov 11Last article

Overview

AISummary of 1 article

Simon Willison releases LLM 0.37.2 to fix two security bugs reported by Daniel de Araujo.

Both could send a configured OpenAI API key to an OpenAI-compatible endpoint from another provider. One case occurs when the key named by api_key_name was never stored. The other occurs when a model with responses: true runs with -o chat_completions 1.

The fixes are tracked as GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w.

Written by AI from the articles below · updated Nov 11, 2:21 PM ET

Check the sources:

Latest developmentNov 11, 12:19 PM ET
LLM 0.37.2 fixes two bugs that could leak OpenAI API keys to other providers

Article timeline

The articles in this story. Times are ET.

Nov 11
  1. Simon WillisonBlog
    LLM 0.37.2 fixes two bugs that could leak OpenAI API keys to other providers

    AISimon Willison releases LLM 0.37.2 to fix two security issues reported by Daniel de Araujo. The bugs could accidentally send a configured OpenAI API key to an OpenAI-compatible endpoint from another provider, either when the key named by api_key_name was never stored or when a responses: true model runs with -o chat_completions 1.

Heat Trend

Current comparable heat
6
Peak comparable heat
9Nov 11, 3:00 PM ET
Change in past 24 hours
–

The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.