{"as_of":"2026-08-09T06:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:402d17c6efb38c46f5339d610df8262ed43c3471f136da7615a5751c41cb707c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:38:17.535246Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T17:38:02.924633Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-08T15:38:17.535246Z","title":"Empirical analysis of large vision-language models against goal hijacking via visual prompt injection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06390","last_updated":"2025-02-11T04:42:24Z","snapshot_observed_at":"2026-08-08T15:33:58.231746Z","submitted_at":"2025-02-10T12:20:08Z","title":"When Data Manipulation Meets Attack Goals: An In-depth Survey of Attacks for VLMs","version":2},"reference_index":120,"source":"pdf_text","source_observed_at":"2026-08-08T15:38:17.535246Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2502.06390"},"observation_digest":"sha256:946cbc28009190760ee5f238977de36482c642b29bb140b7231a8a396ec7fe08","observation_id":"b379bd8c-3a69-4d0d-b58a-fa792b22b576","resolution":{"observed_at":"2026-08-08T15:38:17.535246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-06T11:54:43.102709Z","title":"”Empirical analysis of large vision-language models against goal hijacking via visual prompt injection” arXiv preprint arXiv:2408.03554 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.102709Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:948c88cc11068d7b91d6e9a4aafe9e4aac9d2d952a81c3af4da6056d700291dc","observation_id":"66bdaf77-91db-4f8e-94f4-bc4d9b3abb2d","resolution":{"observed_at":"2026-08-06T11:54:43.102709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-04T09:25:45.204025Z","title":"Empirical analysis of large vision-language models against goal hijacking via visual prompt injection.CoRR, abs/2408.03554, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:45.204025Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:550cccffd61a75be39bf3bf400be5c37039bbfa7ad19c99d18dde2629890b8c5","observation_id":"e9abbf7f-1f7f-47bf-9ac7-84ff298caac9","resolution":{"observed_at":"2026-08-04T09:25:45.204025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":"2408.03554","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Guangyao Li, Yake Wei, Yapeng Tian, Chenliang Xu, Ji-Rong Wen, and Di Hu","venue":null,"work_id":"12bd32e6-fdea-4810-854b-73bfe599263c","year":null},"citing_paper":{"arxiv_id":"2604.03995","last_updated":"2026-04-05T06:32:08Z","snapshot_observed_at":"2026-07-06T22:53:01.835843Z","submitted_at":"2026-04-05T06:32:08Z","title":"A Systematic Study of Cross-Modal Typographic Attacks on Audio-Visual Reasoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T17:34:10.089555Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2604.03995"},"observation_digest":"sha256:a643f12f08e6591e2c91b50574a618ca963dbe61e86d8d8443e7a7c2cfbb0032","observation_id":"95283c95-ff55-4f52-ba7f-13caefec7b44","resolution":{"observed_at":"2026-05-13T17:38:02.926486Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-06T00:41:28.336206Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01028","last_updated":"2026-08-02T06:06:28Z","snapshot_observed_at":"2026-08-07T17:25:43.376608Z","submitted_at":"2026-08-02T06:06:28Z","title":"VLAGuard: A Framework for Evaluating and Mitigating Physical Attention Hijacking in Vision-Language-Action Robots within Wireless Sensor Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T00:41:28.336206Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2608.01028"},"observation_digest":"sha256:dcc492abb678af63cdafb79108767dde3d3d842793ec47786f5411af5751a575","observation_id":"fe9fd81b-398b-4ab8-bdf6-1cd6b8431311","resolution":{"observed_at":"2026-08-06T00:41:28.336206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2408.03554/citation-record","integrity":"/paper/2408.03554/integrity","json":"/paper/2408.03554/citation-record.json","paper":"/paper/2408.03554"},"outbound":[],"paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2408.03554."}