{"as_of":"2026-08-10T09:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7fbf5c669e5e04f7be15de7329c51ae0b07cd7c8c96704a4a96dcf57d0ca73bc","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T11:54:43.247703Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.22304/citation-record","integrity":"/paper/2507.22304/integrity","json":"/paper/2507.22304/citation-record.json","paper":"/paper/2507.22304"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-10T04:33:40.668262Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T11:54:42.946018Z","title":"”A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends” arXiv preprint arXiv:2407.07403 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.946018Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:ee37d7b0c459f3ad5e2e2f99d1a489e0dc1661556d5958ad9d5c26b9f891c395","observation_id":"88073051-5f25-467e-b525-4dcb62ae96af","resolution":{"observed_at":"2026-08-06T11:54:42.946018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14881","snapshot_observed_at":"2026-08-06T11:54:42.952428Z","title":"”A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations” arXiv preprint arXiv:2502.14881 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.952428Z"},"links":{"cited_paper":"/paper/2502.14881","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:3f840806956e42826e586e9b3845f455191ec1457e0bb209eb9a6d5c8bbf97e4","observation_id":"aa0ed4e2-7b1c-4fea-aeb4-f8ee063a94d7","resolution":{"observed_at":"2026-08-06T11:54:42.952428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03726","last_updated":"2025-07-28T05:33:36Z","snapshot_observed_at":"2026-07-06T15:23:52.761222Z","submitted_at":"2023-05-05T17:59:46Z","title":"Otter: A Multi-Modal Model with In-Context Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03726","snapshot_observed_at":"2026-08-06T11:54:42.957966Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.957966Z"},"links":{"cited_paper":"/paper/2305.03726","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:5937caf149e51740344d0a33afff3af56d1b97c308e713345aa4b6803c7ee0e4","observation_id":"48464e29-bed0-41aa-95fd-cd7b66f880e0","resolution":{"observed_at":"2026-08-06T11:54:42.957966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01003","last_updated":"2023-12-15T10:09:58Z","snapshot_observed_at":"2026-07-06T15:49:39.540157Z","submitted_at":"2023-07-03T13:37:00Z","title":"Visual Instruction Tuning with Polite Flamingo","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01003","snapshot_observed_at":"2026-08-06T11:54:42.963956Z","title":"”Visual Instruction Tuning with Polite Flamingo” arXiv preprint arXiv:2307.01003 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.963956Z"},"links":{"cited_paper":"/paper/2307.01003","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:728384728fe1eb00bfc45dee6281b134e6bda4314fceb868c7d7ca7c77ada994","observation_id":"c7b280b1-b854-47ed-a925-3f2a87b7ba7f","resolution":{"observed_at":"2026-08-06T11:54:42.963956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07353","last_updated":"2024-09-11T15:39:42Z","snapshot_observed_at":"2026-07-06T19:13:50.684379Z","submitted_at":"2024-09-11T15:39:42Z","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07353","snapshot_observed_at":"2026-08-06T11:54:42.969519Z","title":"”Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks” arXiv preprint arXiv:2409.07353 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.969519Z"},"links":{"cited_paper":"/paper/2409.07353","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:71c07ecc3348d383b0d0f9018dfc3edbaf512505927928ce2d59f552e4531e8a","observation_id":"40a1995e-ac82-4e79-8dfe-e86f37f1c55f","resolution":{"observed_at":"2026-08-06T11:54:42.969519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03084","last_updated":"2025-05-06T00:41:16Z","snapshot_observed_at":"2026-08-08T04:12:15.326270Z","submitted_at":"2025-05-06T00:41:16Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","version":1},"cited_work":{"arxiv_id":"2505.03084","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.03084","snapshot_observed_at":"2026-08-06T11:54:43.858081Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","venue":"cs.LG","work_id":"e147df60-0344-4610-ad12-fdc2bd906df7","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.975978Z"},"links":{"cited_paper":"/paper/2505.03084","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:6152106abe8ff1a4f5d511257e9c8e9d39eb6fae14ffdbc506315d2dee56f9f4","observation_id":"78a336fa-2d84-49a0-a459-d99fc6e57dbf","resolution":{"observed_at":"2026-08-06T11:54:43.863037Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T11:54:42.985770Z","title":"”Prompt Injection attack against LLM-integrated Appli- cations” arXiv preprint arXiv:2306.05499 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.985770Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:e19197cc4477a5acf35d18597533ec28c434f49065d0f6b5d0e69ce110812596","observation_id":"8cb51be9-59d3-4538-8bc7-c44f705f60b4","resolution":{"observed_at":"2026-08-06T11:54:42.985770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00898","last_updated":"2024-01-31T19:52:00Z","snapshot_observed_at":"2026-08-06T01:29:20.953609Z","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00898","snapshot_observed_at":"2026-08-06T11:54:42.991098Z","title":"”An early categorization of prompt injection attacks on large language models” arXiv preprint arXiv:2402.00898 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.991098Z"},"links":{"cited_paper":"/paper/2402.00898","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:8b520d7bdc50731fd71a0ad6128e8c814f133520cf21f959899600040734d67f","observation_id":"b0fb3c20-d6dd-48da-a02f-d3d2e7691f1a","resolution":{"observed_at":"2026-08-06T11:54:42.991098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T11:54:42.996988Z","title":"”Adversarial Attacks on Multimodal Agents” arXiv preprint arXiv:2406.12814 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.996988Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d9c71136af6bdbf0105d4af4f0de99a1e16bdf5fd4348e1b53979c62538b4b42","observation_id":"b75b21fd-8389-42fd-906e-28d015261e01","resolution":{"observed_at":"2026-08-06T11:54:42.996988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.13652","last_updated":"2025-08-01T18:25:19Z","snapshot_observed_at":"2026-08-07T16:56:47.807793Z","submitted_at":"2025-03-17T18:59:29Z","title":"Web Artifact Attacks Disrupt Vision Language Models","version":2},"cited_work":{"arxiv_id":"2503.13652","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.13652","snapshot_observed_at":"2026-08-06T11:54:43.783468Z","title":"Web Artifact Attacks Disrupt Vision Language Models","venue":"cs.CV","work_id":"e7869706-8e90-4db6-bb6a-fec001847e1c","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.004222Z"},"links":{"cited_paper":"/paper/2503.13652","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:7287171e7f0615b986c150c7dd8117294711add6597deaf5c2b9ed9087feb016","observation_id":"06bad409-a55c-41cf-b570-772d941b7300","resolution":{"observed_at":"2026-08-06T11:54:43.788498Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.383868Z","title":null,"venue":null,"work_id":"48e7f5bb-1c6d-40fb-bcf8-87b5b6d4d48a","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.010179Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:25c2694855addfbd1f6fdd79a8755cccaef136453c2e7b1eee8dc18b25daad4f","observation_id":"89d03e20-79d7-4133-9a52-f2c60d123ec4","resolution":{"observed_at":"2026-08-06T11:54:44.388374Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.367941Z","title":"”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025)","venue":null,"work_id":"c84117c8-0a3b-4baa-9a40-5b23d3886b05","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.016768Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:0dee777301ff16f30e6b65c0d392a647be98b9057c3c83a49ad20b23020d29a8","observation_id":"61cd7451-7d28-4ebf-be93-ee74146bf449","resolution":{"observed_at":"2026-08-06T11:54:44.372916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04655","last_updated":"2024-02-05T19:33:53Z","snapshot_observed_at":"2026-08-08T07:01:42.941395Z","submitted_at":"2023-10-07T02:18:52Z","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04655","snapshot_observed_at":"2026-08-06T11:54:43.022503Z","title":"”VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models” arXiv preprint arXiv:2310.04655 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.022503Z"},"links":{"cited_paper":"/paper/2310.04655","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d251ff26a37e01af206d352638d4b4d333fb594b26223f79da3b7cc536abb5b0","observation_id":"5faea211-9aca-45a4-93cb-9df307c7998b","resolution":{"observed_at":"2026-08-06T11:54:43.022503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.06793","last_updated":"2024-09-24T02:09:10Z","snapshot_observed_at":"2026-08-10T09:36:06.023337Z","submitted_at":"2024-09-10T18:02:51Z","title":"Adversarial Attacks to Multi-Modal Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.06793","snapshot_observed_at":"2026-08-06T11:54:43.027701Z","title":"”Adversarial Attacks to Multi-Modal Models” arXiv preprint arXiv:2409.06793 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.027701Z"},"links":{"cited_paper":"/paper/2409.06793","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:0b98b9335e22a011b15e1a9fabfeae923348ef20f0d581c1c4b47ba707dee3c4","observation_id":"7d133490-41c1-4cd4-92fe-41aa5c4f1c24","resolution":{"observed_at":"2026-08-06T11:54:43.027701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.032650Z","title":"”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.032650Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:a061471cbebb3e1f4cc26da79f27880f58b72270f1bd8fbe8108e4cadd704943","observation_id":"b1d2853d-4266-4254-a13c-3334035f4fd6","resolution":{"observed_at":"2026-08-06T11:54:43.032650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12503","last_updated":"2025-06-11T23:27:36Z","snapshot_observed_at":"2026-08-10T08:04:21.344980Z","submitted_at":"2024-03-19T07:10:58Z","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12503","snapshot_observed_at":"2026-08-06T11:54:43.037974Z","title":"”Securing Large Language Models: Threats, Vulner- abilities and Responsible Practices” arXiv preprint arXiv:2403.12503 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.037974Z"},"links":{"cited_paper":"/paper/2403.12503","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:20acab9402aa5e84baa0c3d2bf42e00e3f7d75f7c8185c24e007995ed3d0f421","observation_id":"e9f03677-1337-4149-808e-22d3de271ec2","resolution":{"observed_at":"2026-08-06T11:54:43.037974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.353033Z","title":null,"venue":null,"work_id":"c336c9c5-4323-4de7-921e-062e7b1e29e2","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.044187Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:b49cff7292d00e214e190065c4e2fa3c6737eb7c41bda2fac8b59be83d6ee476","observation_id":"05790bc7-0bd0-47fe-8d63-c173ba9f2dfd","resolution":{"observed_at":"2026-08-06T11:54:44.357472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.337560Z","title":"”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025)","venue":null,"work_id":"42facc79-0f04-485c-b402-2c4b7d199d1d","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.049734Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:bbe6b0887c88051ee4e76e25d9b4433c166005b2b7f1f2a9f33da0093ec5dbce","observation_id":"c423b82f-43dc-4201-8622-adecfda238d7","resolution":{"observed_at":"2026-08-06T11:54:44.342391Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.322477Z","title":"”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024)","venue":null,"work_id":"280494a2-2c5f-40f4-bdc0-25957652b0b1","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.054591Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d5c9b6db8bc7a1648e81670a929a423b2efdca7985d7b5947e20deb8ebfd8725","observation_id":"b815fd14-b3d3-4ef2-9909-d1917dada538","resolution":{"observed_at":"2026-08-06T11:54:44.326963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T11:54:43.059837Z","title":"”Defeating Prompt Injections by Design” arXiv preprint arXiv:2503.18813 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.059837Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:94d2c2653c1429b19537b54146c53c758e11d40df991104bb1aa336b84610ec2","observation_id":"93863ce8-500c-4d98-9452-654f0d4f6186","resolution":{"observed_at":"2026-08-06T11:54:43.059837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.00020","last_updated":"2021-02-26T19:04:58Z","snapshot_observed_at":"2026-07-06T10:45:03.059688Z","submitted_at":"2021-02-26T19:04:58Z","title":"Learning Transferable Visual Models From Natural Language Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.00020","snapshot_observed_at":"2026-08-06T11:54:43.065058Z","title":"”Learning Transferable Visual Models From Natural Language Supervision” arXiv preprint arXiv:2103.00020 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.065058Z"},"links":{"cited_paper":"/paper/2103.00020","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:132b12318b8779cac67d5c6021486e239efb3358dbe011e7b080dec0e4e23fae","observation_id":"c1aa5956-f218-42c4-899f-c26180dafe67","resolution":{"observed_at":"2026-08-06T11:54:43.065058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-06T11:54:43.070875Z","title":"”Visual Instruction Tuning” arXiv preprint arXiv:2304.08485 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.070875Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:fe9dfd58c3f92f5dba2c9beff2749ba1d6af1ccdd45456e986d69e85f6cf6fbb","observation_id":"efaffa51-15c5-4033-92bc-22b8c0885f50","resolution":{"observed_at":"2026-08-06T11:54:43.070875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.12597","last_updated":"2023-06-15T07:57:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-01-30T00:56:51Z","title":"BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.12597","snapshot_observed_at":"2026-08-06T11:54:43.076150Z","title":"”BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models” arXiv preprint arXiv:2301.12597 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.076150Z"},"links":{"cited_paper":"/paper/2301.12597","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:18f8ff5757e5c57ffce4c1c346d70c4c7fcc8f52ab635972c86e0fec1b6163b8","observation_id":"b7b1fc11-e328-4108-92ea-7790a1eec5a8","resolution":{"observed_at":"2026-08-06T11:54:43.076150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.19287","last_updated":"2024-11-12T10:48:21Z","snapshot_observed_at":"2026-07-06T18:07:27.432252Z","submitted_at":"2024-04-30T06:34:21Z","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.19287","snapshot_observed_at":"2026-08-06T11:54:43.081752Z","title":"”Revisiting the Adversarial Robustness of Vi- sion Language Models: a Multimodal Perspective” arXiv preprint arXiv:2404.19287 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.081752Z"},"links":{"cited_paper":"/paper/2404.19287","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:89cc1f98af2fafae0550bd6a81d06ed0270672de61ad808d244d70ff62067e9d","observation_id":"d3863703-51e5-41df-9d6c-1d1c333341cb","resolution":{"observed_at":"2026-08-06T11:54:43.081752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.307420Z","title":"”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025)","venue":null,"work_id":"f6412f91-e31b-4c1a-8575-7c16840dec3f","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.088075Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:4366a62054ab2e47abe4912c5434805655d1abfcacf047a559300a9357f9a54c","observation_id":"b6660585-77e4-41be-8d93-278b03665702","resolution":{"observed_at":"2026-08-06T11:54:44.312094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.292476Z","title":"”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024)","venue":null,"work_id":"e020e393-6a47-4875-b924-1de90cbe680d","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.093023Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:b144ec88fa32efa1bed8940c26e5d82f9ce54d5c284064c45a4fe43d556b92fa","observation_id":"e18f1516-8b0b-41d8-9fd9-1a0c20477330","resolution":{"observed_at":"2026-08-06T11:54:44.297019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10529","last_updated":"2024-08-24T13:28:45Z","snapshot_observed_at":"2026-08-04T13:36:57.704335Z","submitted_at":"2024-05-17T04:19:19Z","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10529","snapshot_observed_at":"2026-08-06T11:54:43.097851Z","title":"”Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors” arXiv preprint arXiv:2405.10529 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.097851Z"},"links":{"cited_paper":"/paper/2405.10529","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:8d4fab4e160bcaaac3ddd8a15e34c87e41c9c178f11ed6f3338145be312aa94a","observation_id":"ff24a6f7-1b78-4c9c-961c-100377eb7315","resolution":{"observed_at":"2026-08-06T11:54:43.097851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-06T11:54:43.102709Z","title":"”Empirical analysis of large vision-language models against goal hijacking via visual prompt injection” arXiv preprint arXiv:2408.03554 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.102709Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:1b90f5cda40196a0065fd44caf5e236e1325d75223963851a35af77617411779","observation_id":"66bdaf77-91db-4f8e-94f4-bc4d9b3abb2d","resolution":{"observed_at":"2026-08-06T11:54:43.102709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.275431Z","title":"”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001)","venue":null,"work_id":"6bccd717-46fd-45f5-994d-cc4442669ea2","year":2001},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.108618Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:75a436f9480f30b46c34a73b2491550f748d850543ee421ae558a7b5c1e29d6b","observation_id":"44c7eb62-663a-43ba-9778-8aaa00fd2949","resolution":{"observed_at":"2026-08-06T11:54:44.280152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.259197Z","title":"”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024)","venue":null,"work_id":"c9628d33-c756-47da-bc93-6d23af48e9d2","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.113193Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:e808952c1697a342c87c28cf463bb05a93e56bc012b6c0fd463cbdf6a37800f2","observation_id":"bbc8d8c9-e93d-47d2-b873-4ed7995c42f5","resolution":{"observed_at":"2026-08-06T11:54:44.263879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.243378Z","title":"”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024)","venue":null,"work_id":"74e34216-80a0-4b26-90dd-e7c9540b1135","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.118618Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2400761153c2eed8390f7fc0f7adf8d36f4edf36124efb5d5b024ec204ddca70","observation_id":"270baea9-cb96-42de-8eaf-2e8f682e8dfd","resolution":{"observed_at":"2026-08-06T11:54:44.248568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.227061Z","title":"”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024)","venue":null,"work_id":"0076de8e-c6f6-4b42-a9ef-9312342df2d8","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.123634Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:49b767a23d3709c79dafd927b859dc3e089767fb026506ef90445882471a0a42","observation_id":"a8910583-ccd1-4868-9007-42ab78c296ab","resolution":{"observed_at":"2026-08-06T11:54:44.232576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.210726Z","title":"”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024)","venue":null,"work_id":"97675acd-ee61-48e8-b5f4-fea55c4c618c","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.128836Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:ae4fcec74ea4b6d9b344c6c53c9929a7bb247d0bf0e2d1c1f94c881bf6619651","observation_id":"30efcbe0-0321-4a05-b971-2b5d5ebb4d57","resolution":{"observed_at":"2026-08-06T11:54:44.215604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.194030Z","title":"”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025)","venue":null,"work_id":"c61dc937-0487-4a30-93ec-ffc8f605b1c3","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.133736Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:dd02a30d0959b9bf725f5dbde655b20a5be322a829d3fdb09a50015864975f41","observation_id":"0fd1c21d-9986-4e1d-bc6e-77c6063d7da6","resolution":{"observed_at":"2026-08-06T11:54:44.199128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.178227Z","title":"”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021)","venue":null,"work_id":"3744aa0c-b575-4b14-b193-93e390513f84","year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.138302Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:dbd88104f1f642aa77b8326dca2606bb7714cfb3884a44db563338ec5f1b546b","observation_id":"7914237f-2d7f-42e4-9bd3-efdbfbac8e98","resolution":{"observed_at":"2026-08-06T11:54:44.182922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-08-06T11:54:43.143299Z","title":"”Improved Baselines with Visual Instruction Tuning” arXiv preprint arXiv:2310.03744 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.143299Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:f7c03d44acbd6717a3a0744bcd4c476d015813c6c215423253de1c757a469126","observation_id":"76282668-2978-4050-a710-ff401cb55df0","resolution":{"observed_at":"2026-08-06T11:54:43.143299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.162632Z","title":null,"venue":null,"work_id":"02a9fa11-e08c-43bb-b07b-56ad0a85ad1b","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.148125Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:94971b203f118ac47a8f83e3a395949fb81bbbfa28b208308c207cfab8636c83","observation_id":"c756846d-6e30-4681-94be-ad3a3ba03b22","resolution":{"observed_at":"2026-08-06T11:54:44.167283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.12086","last_updated":"2022-02-15T05:43:32Z","snapshot_observed_at":"2026-08-09T08:39:37.884261Z","submitted_at":"2022-01-28T12:49:48Z","title":"BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.12086","snapshot_observed_at":"2026-08-06T11:54:43.153675Z","title":"”BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation” arXiv preprint arXiv:2201.12086 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.153675Z"},"links":{"cited_paper":"/paper/2201.12086","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:dfcae241614b84434e3c7016eecca981b618677847290b33a43f1df2e1f464ec","observation_id":"546f64ed-bc4f-46f2-b00c-a17c7af023ba","resolution":{"observed_at":"2026-08-06T11:54:43.153675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.146635Z","title":"”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021)","venue":null,"work_id":"6c2df04f-f8b9-45ae-8f5d-2c567ed96059","year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.158623Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:b8789349420b9453eaab9b9be5c2294fdab945a430f7369ea41823b57151c701","observation_id":"efa2767d-71fe-4e26-b13c-928d44c44778","resolution":{"observed_at":"2026-08-06T11:54:44.151445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.131144Z","title":"”Hiding data in images by simple LSB substitution” Pattern Recognition (2004)","venue":null,"work_id":"b4fe5545-5bfa-4230-b4bb-a02e70a97242","year":2004},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.163327Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:663cb2ab376cffda287bd3cea9b36f95623e1eb6ac1614c47122f314dc90da63","observation_id":"fc260326-9023-4e34-8a65-37a3c558bcd3","resolution":{"observed_at":"2026-08-06T11:54:44.135985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.115795Z","title":"”Attacks on steganographic systems” Information Hiding Workshop (1999)","venue":null,"work_id":"83d3b27b-c8a9-42f1-bb34-aeb50ffe9bbc","year":1999},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.169761Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:b961fa698a6ab38a32de5be64c27c24f0488805d48e82a9db6dbab4d1f1bb397","observation_id":"099316a3-ff37-4b6f-9ce8-96cef00cb4f2","resolution":{"observed_at":"2026-08-06T11:54:44.120681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.100814Z","title":"”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997)","venue":null,"work_id":"8acde51d-004b-484d-8ba4-829f827b5f37","year":1997},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.176321Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:faff08c06c478cdf08533282ebe4226caf54fa7ef50fd2a17cc69ffaf3284999","observation_id":"f684a847-a30f-4025-aba8-cd3f807c893b","resolution":{"observed_at":"2026-08-06T11:54:44.105413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.083416Z","title":"”An Analysis of LSB & DCT based Steganography”","venue":null,"work_id":"860f006c-faeb-4a13-937e-2fed87532b3f","year":null},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.182439Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:867d36a02f73f96576fb0985f52d81ca29aa0145ebe55d0301d5504cebbffd27","observation_id":"d6588eb5-fb3a-4692-bf8b-e625baa6c2f9","resolution":{"observed_at":"2026-08-06T11:54:44.088020Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.12503","last_updated":"2023-04-25T00:19:23Z","snapshot_observed_at":"2026-07-06T15:19:35.578148Z","submitted_at":"2023-04-25T00:19:23Z","title":"CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques","version":1},"cited_work":{"arxiv_id":"2304.12503","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.12503","snapshot_observed_at":"2026-08-06T11:54:43.472351Z","title":"CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques","venue":"cs.CR","work_id":"f8945067-7c92-4b31-9ba2-7f24cc45f35c","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.188737Z"},"links":{"cited_paper":"/paper/2304.12503","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:63432f52d694fd6f99a563de31b51464fe47e2e9844484c021525748bc7a46ab","observation_id":"2452c1e6-1fce-408c-9e48-a2124e8eee8d","resolution":{"observed_at":"2026-08-06T11:54:43.478459Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.066948Z","title":"”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017)","venue":null,"work_id":"5c362aa8-dff5-43b4-aac6-e004f9a04f8a","year":2017},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.193475Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:07d1efd711c0130fa73601f2ecda0d815a6d3e4798c210b472fb9519e2455047","observation_id":"8183c266-9177-4a62-8d78-df6ac83b5573","resolution":{"observed_at":"2026-08-06T11:54:44.072404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-06T11:54:43.197642Z","title":"”Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injec- tion” arXiv preprint arxiv:2302.12173 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.197642Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d9571b08e05de2828cd657b55e6e0066277e84ec8ec464b4ac53e76a74766cd9","observation_id":"3dd6cc42-4794-4c63-8194-cced2f12c9f0","resolution":{"observed_at":"2026-08-06T11:54:43.197642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.044785Z","title":"”Peak signal-to-noise ratio” Wikipedia","venue":null,"work_id":"577d8a93-a6d2-4950-82e0-dd097434b1f2","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.201965Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:e40497e54461b4e7bb90884557c83f6fd0fa4175baf8e8f21ce965463c4669dc","observation_id":"6a9f7517-49f3-4676-9a0c-5e70355a2cdf","resolution":{"observed_at":"2026-08-06T11:54:44.049748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.027754Z","title":"”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023)","venue":null,"work_id":"2ff3dfa7-3360-4ee4-9963-09616f43d6b1","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.206614Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:296845e3b7b2e1b1de30d830971aec06f2119c23410d64d3f7d5c3fa06fde9ab","observation_id":"8a574751-d214-443a-ac91-1db79e52a918","resolution":{"observed_at":"2026-08-06T11:54:44.032866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.010039Z","title":"”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024)","venue":null,"work_id":"6a32289d-6fca-42f8-9e2d-a6c2d7368233","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.210977Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:e8b9a7c8051be7f1027879060294d4b2b434cac1ab556f711c189918021c1297","observation_id":"1f633e2a-357d-4cbb-98ad-f6f0f3e823a9","resolution":{"observed_at":"2026-08-06T11:54:44.015017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.993991Z","title":"”Exploring steganography: Seeing the unseen” Computer (2008)","venue":null,"work_id":"f249000d-22ae-41a1-9397-f976444a0f6a","year":2008},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.215261Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:62016a0c5b449de8dd55c409fdba011624612da2e17827d965f9d2c019e45cca","observation_id":"b5e09b79-2780-4426-90c7-d3cdfe4dc690","resolution":{"observed_at":"2026-08-06T11:54:43.998757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.976925Z","title":"”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security","venue":null,"work_id":"7ee3e8f1-87cb-4400-8fa1-48b9d1220e9a","year":null},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.219502Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:6bf9eeb12fde1292426fcdd369aa468871de8be1622e0ece526521eed84e6bdc","observation_id":"9d955cd4-0d35-433e-81a8-52d7524f3468","resolution":{"observed_at":"2026-08-06T11:54:43.982581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.14565","last_updated":"2024-03-19T22:53:25Z","snapshot_observed_at":"2026-08-06T22:33:34.254048Z","submitted_at":"2023-06-26T10:26:33Z","title":"Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.14565","snapshot_observed_at":"2026-08-06T11:54:43.224102Z","title":"”Mitigating hallucination in large multi-modal models via robust instruction tuning” arXiv preprint arXiv:2306.14565 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.224102Z"},"links":{"cited_paper":"/paper/2306.14565","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:46e3ed2db57991d13eb8f4429fd01cb78227779f6259de13e7ed31ec54d89ea5","observation_id":"2154cf33-6248-4ac0-b8d1-10c78b5966e0","resolution":{"observed_at":"2026-08-06T11:54:43.224102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.961080Z","title":"”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023)","venue":null,"work_id":"ca92b0ca-239b-4aa6-ba49-e549a6709694","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.228580Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:93446d332a1516d9746a6956d1ef64173c1c7d6043a2671090e98a812e02a479","observation_id":"c1851ec6-ff7a-4618-983d-1670f5d9ff74","resolution":{"observed_at":"2026-08-06T11:54:43.965905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12336","last_updated":"2024-06-05T15:32:03Z","snapshot_observed_at":"2026-08-09T23:45:31.392277Z","submitted_at":"2024-02-19T18:09:48Z","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12336","snapshot_observed_at":"2026-08-06T11:54:43.232843Z","title":"”Robust CLIP: Unsupervised Adversarial Fine- Tuning of Vision Embeddings for Robust Large Vision-Language Mod- els” arXiv preprint arXiv:2402.12336 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.232843Z"},"links":{"cited_paper":"/paper/2402.12336","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:5f2291700031f8dc47523978bbce8067d8c762a2c6fc19fea3127be8d63ce5a9","observation_id":"44628e35-95c1-46cb-a172-88e77b633620","resolution":{"observed_at":"2026-08-06T11:54:43.232843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03777","last_updated":"2023-12-08T15:41:28Z","snapshot_observed_at":"2026-08-09T00:38:43.571831Z","submitted_at":"2023-12-06T04:59:56Z","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03777","snapshot_observed_at":"2026-08-06T11:54:43.237746Z","title":"”On the Robustness of Large Multimodal Models Against Image Adversarial Attacks” arXiv preprint arXiv:2312.03777 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.237746Z"},"links":{"cited_paper":"/paper/2312.03777","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:7082f4f804f4a3c0edcdd66d1963755a73dde87d127f0de0a5b395e4c92c0865","observation_id":"ab267661-edec-4b18-867d-7e5e639b23d1","resolution":{"observed_at":"2026-08-06T11:54:43.237746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-09T06:09:32.355513Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-06T11:54:43.242527Z","title":"”Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey” arXiv preprint arXiv:2411.09259 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.242527Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2d1b625fe30679cfe07b80ac5b7e0eab92d5ab2b2c9a8bd2a8f63d89e3985eac","observation_id":"9e0b78cb-4f63-44f2-bcbf-5a7b8fd736bb","resolution":{"observed_at":"2026-08-06T11:54:43.242527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2501.01042","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.350184Z","title":"”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025)","venue":null,"work_id":"37c5ebc1-928a-4a8c-9c9c-c1b736453e9e","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.247703Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:186869e9932e4cfc50f2ad0363e255da77196ef1128fb83404a61922657a224c","observation_id":"5a3eaf97-d3b9-4e58-8a25-23c033edbcfa","resolution":{"observed_at":"2026-08-06T11:54:43.360766Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T09:49:58.938010Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":4,"verified_fuzzy":24},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2507.22304."}