llm 0.37.2

11th November 2026

Release llm 0.37.2 — Access large language models from the command-line

Fixes a security issue reported by Daniel de Araujo in GHSA-v9h7-jj4g-f862 and GHSA-r639-rr7r-x72w.

LLM has a mechanism called extra-openai-models.yaml - now managed by the new-in-0.37 llm openai endpoint add command - for using LLM with OpenAI-compatible API endpoints from other providers.

Daniel reported two ways this could accidentally send your configured OpenAI API key to one of those providers: if the key named by api_key_name had never been stored, or if a responses: true model was run with -o chat_completions 1.

Posted 11th November 2026 at 5:19 pm

Recent articles

• Locating the source of a mysterious beep with Claude - 9th November 2026
• Hide your slop PR descriptions behind <details><summary> - 9th November 2026
• Qwen 3.8 27B on my laptop can interpret model weights, too - 3rd November 2026
• The U.S. Census Bureau and “Super Intelligence” - 2nd November 2026

This is a beat by Simon Willison, posted on 11th November 2026.

projects 565 releases 32 security 643 llm 650

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe