Information Exposure

Overview promptfoo is a Python wrapper for the promptfoo CLI - LLM testing, red teaming, and security evaluation Affected versions of this package are vulnerable to Information Exposure due to the inconsistent enforcing of excludeTargetOutputFromAgenticAttackGeneration setting. An attacker can...