Skip to content
Back to feed

August 27, 2025 · MistralApi

Completion API streamed chunks add parameter p to block token-length attacks

  • Added a new parameter p to the chunks streamed back by the Completion API. (security) (api)
    • Implemented for security to prevent token-length side-channel attacks, as reported by Microsoft researchers.
    • Note that this change may break applications relying on strict parsing of the chunks. Applications using the official SDK are unaffected, but users relying on the mistral-common package may need to update to 1.8.4 or higher.