LLM 0.37.2 fixes a security vulnerability reported by Daniel de Araujo. The issue arises from the extra-openai-models.yaml mechanism, which is now managed by the new "llm openai endpoint add" command. This mechanism allows using LLM with OpenAI-compatible API endpoints from other providers. However, Daniel's report highlighted two scenarios where the configured OpenAI API key could be accidentally sent to one of those providers: if the key had never been stored, or if a responses:true model was run with -o chat_completions 1. The update addresses these concerns, enhancing security for developers and operators of AI agents.