{"as_of":"2026-08-08T23:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7d747c0ceedc89137f582cff1c78d03eabb8096b1279b10dbf2c48cea064e668","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":26,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T18:07:15.303097Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":13,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-08T18:07:15.303097Z","title":"org/CorpusID:269214059","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.05772","last_updated":"2025-02-09T04:21:27Z","snapshot_observed_at":"2026-08-08T17:59:39.548920Z","submitted_at":"2025-02-09T04:21:27Z","title":"Effective Black-Box Multi-Faceted Attacks Breach Vision Large Language Model Guardrails","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T18:07:15.303097Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.05772"},"observation_digest":"sha256:c68d5424c11e0b59c2e5771a0174bc71eb702580796a80d37d15462cf19642fc","observation_id":"0ceacd5d-63f0-4c4e-8e3b-de9b7419b48a","resolution":{"observed_at":"2026-08-08T18:07:15.303097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-08T11:17:01.672767Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07987","last_updated":"2025-06-04T18:10:51Z","snapshot_observed_at":"2026-08-08T11:11:03.867295Z","submitted_at":"2025-02-11T22:07:47Z","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","version":3},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T11:17:01.672767Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.07987"},"observation_digest":"sha256:7d2c68797774a6b3688233b064e2ac0a4b10b23713126069bd171fdbd8a6c92c","observation_id":"08fdb8bf-d39d-44ee-8847-db4b383435d5","resolution":{"observed_at":"2026-08-08T11:17:01.672767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T19:46:40.707864Z","title":"Advances in neural in- formation processing systems, 35:27730–27744","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.10486","last_updated":"2025-02-14T08:44:43Z","snapshot_observed_at":"2026-08-07T19:39:58.732115Z","submitted_at":"2025-02-14T08:44:43Z","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T19:46:40.707864Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.10486"},"observation_digest":"sha256:b3e852e55e12b419387db22b303d889997112736e8d67b031dd7aea43d10cbc2","observation_id":"c26d4dcb-c1a4-43df-a860-0fe687fcd6f6","resolution":{"observed_at":"2026-08-07T19:46:40.707864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2502.18864","last_updated":"2025-02-26T06:17:13Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-26T06:17:13Z","title":"Towards an AI co-scientist","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-11T13:02:43.571234Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2502.18864"},"observation_digest":"sha256:b12715ada27918cc4ad6af96e446beff297ef3e983c98f848f150c0ed6f22f1a","observation_id":"65b0250c-a2b7-456a-a846-6ac6b5dc2f96","resolution":{"observed_at":"2026-05-11T13:02:44.356995Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T13:22:02.206932Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21967","last_updated":"2025-05-28T04:43:39Z","snapshot_observed_at":"2026-08-08T01:18:33.252536Z","submitted_at":"2025-05-28T04:43:39Z","title":"Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T13:22:02.206932Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.21967"},"observation_digest":"sha256:43d011fd696f2cc0c9a48017f51414fd98be0314eb92914155cb3fc196480a56","observation_id":"b8bad99f-9b0a-4851-beef-152ef6c85924","resolution":{"observed_at":"2026-08-07T13:22:02.206932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T12:37:21.846602Z","title":"org/abs/2306.13213","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24208","last_updated":"2025-05-30T04:40:08Z","snapshot_observed_at":"2026-08-08T01:25:52.362186Z","submitted_at":"2025-05-30T04:40:08Z","title":"Bootstrapping LLM Robustness for VLM Safety via Reducing the Pretraining Modality Gap","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:37:21.846602Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.24208"},"observation_digest":"sha256:45c6484d9957525421171c7e3ab460ca5b545d79506102e5fc89fd5e095ce45f","observation_id":"a4393d1e-3329-4552-94e9-39b145ddd14c","resolution":{"observed_at":"2026-08-07T12:37:21.846602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T12:34:35.624649Z","title":"Visual adversarial examples jailbreak large language models.arXiv preprint arXiv:2306.13213, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24232","last_updated":"2025-05-30T05:48:50Z","snapshot_observed_at":"2026-08-07T12:26:05.850027Z","submitted_at":"2025-05-30T05:48:50Z","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:34:35.624649Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.24232"},"observation_digest":"sha256:cb73652d96d4c8d63c312048f60515b57d429b1ed64e467271929925a4d8975a","observation_id":"cfa67e39-094b-494c-8967-ee361b543bc3","resolution":{"observed_at":"2026-08-07T12:34:35.624649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T12:35:27.915330Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24519","last_updated":"2025-05-30T12:30:50Z","snapshot_observed_at":"2026-08-07T12:17:21.702915Z","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:27.915330Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2505.24519"},"observation_digest":"sha256:bceafd82e33617b3767b5ccb822344b0bec0cec47d38239448b3c1c63066f552","observation_id":"aaec619b-8e1a-4d76-ad0a-f774bf657377","resolution":{"observed_at":"2026-08-07T12:35:27.915330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-07T00:57:13.759973Z","title":"org/abs/2306.13213","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12430","last_updated":"2025-07-11T02:01:54Z","snapshot_observed_at":"2026-08-07T08:27:10.239745Z","submitted_at":"2025-06-14T10:03:17Z","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:57:13.759973Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2506.12430"},"observation_digest":"sha256:f29980df785b785875f0b20b5fc2751089804ed7abcc1cd2f3b3388acd62ce9c","observation_id":"925b90e8-dbdf-43e8-b2ee-94e35ed6c82c","resolution":{"observed_at":"2026-08-07T00:57:13.759973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-06T17:21:35.290281Z","title":"Visual Adversarial Examples Jail- break Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.11155","last_updated":"2025-07-15T10:04:27Z","snapshot_observed_at":"2026-08-06T17:12:51.246126Z","submitted_at":"2025-07-15T10:04:27Z","title":"Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:21:35.290281Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2507.11155"},"observation_digest":"sha256:b39e36b86708b16d877025530ab2a9fd323721204d2aa8adabf8fc9bca9bde79","observation_id":"b1632b72-81db-4f0f-861a-6e8f9ece354b","resolution":{"observed_at":"2026-08-06T17:21:35.290281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T20:31:43.040164Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:43.040164Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:ae5036b207a7d856aa97b13ca23ea46d24f0a2649e04dfeb7b056f324c282d52","observation_id":"9964697c-2f9a-48fe-8bac-26af82655bea","resolution":{"observed_at":"2026-08-05T20:31:43.040164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T13:44:56.261344Z","title":"Christian Schlarmann and Matthias Hein","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.00373","last_updated":"2025-08-30T06:00:53Z","snapshot_observed_at":"2026-08-08T20:42:24.128804Z","submitted_at":"2025-08-30T06:00:53Z","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T13:44:56.261344Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2509.00373"},"observation_digest":"sha256:3354609dd16a19c8528563247b825adbb184c4a026feff40bc9d531cbbf7a985","observation_id":"2a5973cb-a02f-4be9-a475-36a9752362cd","resolution":{"observed_at":"2026-08-05T13:44:56.261344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-04T13:45:27.025943Z","title":"Visual adversarial examples jailbreak aligned large language models.arXiv preprint arXiv:2306.13213,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25533","last_updated":"2026-07-06T05:00:34Z","snapshot_observed_at":"2026-08-06T23:26:32.833872Z","submitted_at":"2025-09-29T21:43:18Z","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:27.025943Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2509.25533"},"observation_digest":"sha256:89a167ce274f6df06b8795dbee60b7ecb244db967552e5a70519f4dc9d62d9f2","observation_id":"9a351771-dc91-40a1-969e-0b6c8e39baf7","resolution":{"observed_at":"2026-08-04T13:45:27.025943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-04T09:25:51.343016Z","title":"Visual adversarial examples jailbreak large language models.CoRR, abs/2306.13213, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":144,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:51.343016Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:f900851d33baffbc97bcd9397477726fb3bdb1b771c9cbf398e0615a5cb10698","observation_id":"531ffd92-d8cd-4423-bc72-0320ad466a2e","resolution":{"observed_at":"2026-08-04T09:25:51.343016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2512.00520","last_updated":"2026-04-27T13:00:45Z","snapshot_observed_at":"2026-08-06T05:22:56.702843Z","submitted_at":"2025-11-29T15:31:16Z","title":"Toward a Safe Internet of Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-17T03:16:40.622915Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2512.00520"},"observation_digest":"sha256:e693d584c6b0eca280b920f1fa3ac20a1e4f4efe4d414decd93e3cc03faf3485","observation_id":"f107f72a-e7bd-4c96-9a39-fd1ce2e05c5d","resolution":{"observed_at":"2026-05-17T03:18:56.863655Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2604.06247","last_updated":"2026-04-06T16:29:05Z","snapshot_observed_at":"2026-07-06T22:54:48.916799Z","submitted_at":"2026-04-06T16:29:05Z","title":"SALLIE: Safeguarding Against Latent Language & Image Exploits","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T19:04:46.426969Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2604.06247"},"observation_digest":"sha256:229ea50fe6e76edeaef5a195352edcefd95cb1f15aae7a132e8a5d6de1635175","observation_id":"1f9debe2-c222-4d8d-bac2-b0d82b3df792","resolution":{"observed_at":"2026-05-10T23:30:51.168905Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2604.13803","last_updated":"2026-04-15T12:38:51Z","snapshot_observed_at":"2026-07-06T23:01:41.643335Z","submitted_at":"2026-04-15T12:38:51Z","title":"Gaslight, Gatekeep, V1-V3: Early Visual Cortex Alignment Shields Vision-Language Models from Sycophantic Manipulation","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-10T13:09:35.407790Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2604.13803"},"observation_digest":"sha256:00e7bca34e65dcf8b10322997bffe4e5de33c859a86346ba3d94ad06a594b0bc","observation_id":"a4b2afe4-6b81-4278-9a47-a7b21d37858c","resolution":{"observed_at":"2026-05-10T13:10:26.230242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-08-03T12:34:05.607551Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:55696374d05095b318c1d5f26fc944e644ab6ab7a1fa573213c6f0c239818f2f","observation_id":"ec89f14c-30b9-4c5e-aa7e-c98dd706d83b","resolution":{"observed_at":"2026-05-11T16:56:08.117312Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:022ed23118ac37aedadc01aca0f93cff2c6cbec9bd50b2beae65190e784a4260","observation_id":"2f395c81-659c-41af-a702-2abee27ca02f","resolution":{"observed_at":"2026-05-15T07:15:12.011445Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2605.17341","last_updated":"2026-05-17T09:21:11Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T09:21:11Z","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-20T14:07:56.386933Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2605.17341"},"observation_digest":"sha256:56349238ab8c6cd0b5a164d2a96ed800115a08f926b9b1efe043f856b68ffa8b","observation_id":"c5dcd8a0-1ecd-4bba-ae02-34177f862ff6","resolution":{"observed_at":"2026-05-20T14:08:20.903832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.07595","last_updated":"2026-05-29T05:17:03Z","snapshot_observed_at":"2026-08-03T21:14:55.280239Z","submitted_at":"2026-05-29T05:17:03Z","title":"VisualLeakBench: Reproducible Action-Boundary Propagation Failures in Vision-Language Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-28T22:59:43.041678Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.07595"},"observation_digest":"sha256:754eba6d98ec94c0b6284dd33207686aa04d4ad3b6042c61cad9ecf507ff1222","observation_id":"95cd0a8a-75c5-4b9a-82fd-0fa8c46dafdd","resolution":{"observed_at":"2026-06-28T23:02:46.377898Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.09125","last_updated":"2026-06-08T07:19:42Z","snapshot_observed_at":"2026-07-06T23:48:30.569726Z","submitted_at":"2026-06-08T07:19:42Z","title":"Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-06-27T16:33:28.848573Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.09125"},"observation_digest":"sha256:6410d9df270dc72fa7ae0818b4a940672d6c77518ed91ec0c563aa54113d2113","observation_id":"91d8210c-4431-484c-9eeb-1075252bf4a4","resolution":{"observed_at":"2026-07-03T01:27:30.909100Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.11854","last_updated":"2026-06-10T09:30:37Z","snapshot_observed_at":"2026-08-01T08:16:13.928240Z","submitted_at":"2026-06-10T09:30:37Z","title":"Fine-tuning Multi-modal LLMs with ART: Art-based Reinforcement Training","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T10:30:51.490047Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.11854"},"observation_digest":"sha256:52163685a438e84bdb5b025172e6faf07e977481aa173644e48c99d1ba941b10","observation_id":"4bbe5218-121c-47a8-9c65-c0a83595a84b","resolution":{"observed_at":"2026-07-03T09:07:48.157454Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:af61f7a3dca928b1ace4358831f6ec42302df1a045fb99e6f1b7ad25abe0156d","observation_id":"5e9a01e2-6a59-421f-91a3-95693b5f4c73","resolution":{"observed_at":"2026-07-03T21:08:58.336406Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.26566","last_updated":"2026-06-25T03:32:12Z","snapshot_observed_at":"2026-08-03T17:22:40.185111Z","submitted_at":"2026-06-25T03:32:12Z","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-26T04:35:51.583460Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.26566"},"observation_digest":"sha256:2134f358138ce61f06e63805f465d33779f0579053d0ad9e2aea0fe4d57958f3","observation_id":"0d447d9b-423f-4ea3-b4c0-762534a77e4a","resolution":{"observed_at":"2026-06-26T04:38:59.046933Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-02T15:03:00.459707Z","title":"org/abs/2306.13213","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21600","last_updated":"2026-05-03T19:21:06Z","snapshot_observed_at":"2026-08-06T09:31:16.482834Z","submitted_at":"2026-05-03T19:21:06Z","title":"Securing Multimodal AI through Internal Information Decomposition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T15:03:00.459707Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2607.21600"},"observation_digest":"sha256:83cebf576258394931ecaac4f833d70257bb870811d6b28263492b9139f208e8","observation_id":"ec5622d3-6877-43fe-9108-89fb88938cc3","resolution":{"observed_at":"2026-08-02T15:03:00.459707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2306.13213/citation-record","integrity":"/paper/2306.13213/integrity","json":"/paper/2306.13213/citation-record.json","paper":"/paper/2306.13213"},"outbound":[],"paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 26 inbound Pith citation observations for arXiv:2306.13213."}