# LLM 0.37.2

> **Platform:** [SPIDITS AI](https://spidits.com/) — Real-Time AI News & Market Intelligence  
> **Published:** 2026-11-11T17:19:52.000Z  
> **Category:** PRODUCT_LAUNCH  
> **Impact Score:** 130/100  
> **Primary Source:** [Simon Willison AI](https://simonwillison.net/2026/Nov/11/llm)  
> **Canonical Citation:** [https://spidits.com/timeline/llm-0-37-2](https://spidits.com/timeline/llm-0-37-2)

## Executive Summary
Release: llm 0.37.2 Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w .

## Why It Matters (Strategic Analysis)
Unintended credential leakage to alternative OpenAI-compatible API providers exposes primary platform keys to untrusted third-party infrastructure. This highlights the architectural vulnerability of multi-provider routing layers when credential lookup fallbacks are not explicitly isolated per endpoint.

## Key Entities & Companies
- **OpenAI**

## Referenced Coverage & Sources
- **[Simon Willison AI](https://simonwillison.net/2026/Nov/11/llm)**: llm 0.37.2 — _Release: llm 0.37.2 Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w . LLM has a mechanism called extra-openai-models.yaml - now managed by the new-in-0.37 llm openai endpoint add command..._

---
*Synthesized by SPIDITS AI Market Intelligence Desk. Track live AI news, model releases, and funding: [https://spidits.com](https://spidits.com)*