CVE-2026-125328

The pgEdge Go LLM Library versions 0.1.0 through 0.1.x contain a vulnerability where the GET /v1/health endpoint in llm/proxy/handlers.go discloses fragments of the operator's third-party provider API keys. The root cause is that the handleHealth function pings providers using real credentials an...

EUVD-2026-121710

pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping providers with the operator's real credential...