Information Exposure

Overview promptfoo is a LLM eval & testing toolkit Affected versions of this package are vulnerable to Information Exposure due to the inconsistent enforcing of excludeTargetOutputFromAgenticAttackGeneration setting. An attacker can obtain sensitive information about target output. Remediation...