Information Exposure

Overview promptfoo is a Python wrapper for the promptfoo CLI - LLM testing, red teaming, and security evaluation Affected versions of this package are vulnerable to Information Exposure due to the inconsistent enforcing of excludeTargetOutputFromAgenticAttackGeneration setting. An attacker can...

Information Exposure

Overview promptfoo is a LLM eval & testing toolkit Affected versions of this package are vulnerable to Information Exposure due to the inconsistent enforcing of excludeTargetOutputFromAgenticAttackGeneration setting. An attacker can obtain sensitive information about target output. Remediation...

@recombine-ai/bosun (>=0.1.0 <=0.9.1), slimspec (>=0.0.1 <=0.0.3) potentially affected by unknown CVE via promptfoo (>=0.105.1 <=0.112.3)

promptfoo NPM version =0.105.1, =0.1.0, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-PROMPTFOO-15202496...