{"as_of":"2026-08-21T05:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:70eeee01c2f81399ee0d9db00fee1b3d12bbb23f7dcce8667b2a3a633beb74b6","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T12:57:48.096929Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.10742/citation-record","integrity":"/paper/2606.10742/integrity","json":"/paper/2606.10742/citation-record.json","paper":"/paper/2606.10742"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:0bf859364988412936d961750d5d8a4bf9476168994a485ba384bb2f81807452","observation_id":"f0b40ab4-bfde-4de9-9957-b0f68423859f","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:a9d3e7155ee29cab429866ea192c8df1285d0b985349b5981e5c7112d9387c93","observation_id":"8b9fb798-835a-45b1-86f0-718aee4b2549","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:418c66a23c73699f649ca22c5f43b73e0bc9e7f68cac78255a1bf981bb93b4a7","observation_id":"1e33cf3f-3cde-4f72-b2d6-131c664af69b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.emnlp-main.849","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing , pages =","venue":null,"work_id":"822af42c-b415-4829-978d-0bdbbfa3a30b","year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:bfe184b6483e72d3a47538d628eaf026b1c0a0ff068e81b3949d748476979622","observation_id":"f4590032-10d9-4209-a6f6-36948f01bc4c","resolution":{"observed_at":"2026-06-27T13:10:56.620112Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-13T19:08:33.177866+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-13T19:08:33.177866+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:dd3de9e699b914d62bf60b284eb105a12a582e825d6c8ef5ba051ac0b4292a78","observation_id":"8e6944fe-eeb5-444e-a0e9-0c20fbbf2823","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d004e62e1c2012ed8ca567ae3ef4477b290f9882684b001f7fe83c401701d1a3","observation_id":"2e18afce-66d3-47db-b654-42d84e7a5654","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:54576636edcc199b0a6b0304b642ba4bc693f6c75c8f11177b328dbcb914568b","observation_id":"02db700d-c4bc-45f3-aa47-5c1dc7dc96a4","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.29418","last_updated":"2026-08-11T15:52:40Z","snapshot_observed_at":"2026-08-20T13:50:03.160708Z","submitted_at":"2026-03-31T08:22:07Z","title":"Covert Visual Prompt Injection against Commercial Multimodal Large Language Models","version":2},"cited_work":{"arxiv_id":"2603.29418","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2603.29418","snapshot_observed_at":"2026-08-12T02:26:10.138845Z","title":"arXiv preprint arXiv:2603.29418 , year =","venue":null,"work_id":"990b60d5-6811-44d8-bdb5-595e453bd694","year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"cited_paper":"/paper/2603.29418","citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:2c48b47de19c338fbebb1a48241d5b2d260c84723f69611e248c0446be1c4975","observation_id":"dbb23d70-4fc8-49f9-b047-6793d5756d67","resolution":{"observed_at":"2026-08-12T02:26:10.138845Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Memory Injection Attacks on","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:23b49eab5a35330f29523949e4766e0f5bbda9099b52c241649d8db6a2b8da70","observation_id":"be6f0c75-2cd7-403f-b88f-4918e6bd0ceb","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:363de81f5c240de3dedcd18e236cc413d36b1803d00cf70235d9716ecd7ef1b0","observation_id":"22470326-5237-44a9-8d5d-aa8629a9c204","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"From Storage to Steering: Memory Control Flow Attacks on","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:c74ec5fee10e6d154cf9a4f1dabd8abbb269fb5d26fd36526fb7a9da77dbf8f7","observation_id":"920b0c5d-ac4e-4891-b2fb-7913ecdd1c07","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Memory Poisoning Attack and Defense on Memory Based","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:ec7b5f9bf748caee7aab7efc23d20c4bd43a588d1bd108e3423f8b170331f642","observation_id":"a9b64c62-79a6-4989-b332-7d1f9895aea8","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16130","last_updated":"2025-02-19T10:49:41Z","snapshot_observed_at":"2026-08-16T12:38:40.131901Z","submitted_at":"2024-04-24T18:38:11Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","version":2},"cited_work":{"arxiv_id":"2404.16130","doi":"10.48550/arxiv.2404.16130","metadata_source":"pith","pith_arxiv_id":"2404.16130","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","venue":"cs.CL","work_id":"588618d7-fd41-4053-b34d-a981f8793039","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"cited_paper":"/paper/2404.16130","citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:0f077b7089fb077eea1c008b9d85f12b565b5a6cc9c1fef721f4fdcca75a4fc6","observation_id":"51236ec2-2803-4df4-bb5f-e5add626d657","resolution":{"observed_at":"2026-06-27T13:10:56.614009Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-15T03:08:15.147678+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-15T03:08:15.147678+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:39b0a5ea3d5dd64e55e9712aa8e21fd2154a730aa9de8a46dedd248d2fc8fa0b","observation_id":"e5515499-552c-4a76-95dc-e5f5fae5fb81","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:41169f0006355abd90b14ed350d703ab20645924d9335cc988d656db140330f8","observation_id":"3450fa48-dfff-4e7f-8d06-439f0b9d0a1c","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:2bea3ea98d07eac22d15b6c7bbe5e2acdb93f8c2e1f304daaa838e24d41d9eaa","observation_id":"c85d080a-dd82-4d92-a767-bea326a90e3e","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:c39e44fac81372fd83ebb21fd6eb07bbf1c6834e814838f8864d6fc3e27abb22","observation_id":"5bba81ad-ed78-4a69-9220-b8c9f57b2fdd","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.371","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models","venue":null,"work_id":"5549b83c-a0a2-4e60-ac23-4e941c945664","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:95f1a0cb0fef8070cf3c88a42f9d937acfd3edc24db6b6091b6d08babc4ed651","observation_id":"475f5427-ba06-4b01-9d1a-6ae8780de2d4","resolution":{"observed_at":"2026-06-27T13:10:56.608346Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-05-24T02:24:35.193099+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T02:24:35.193099+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:1f39b25be67a3c232ae003252f894033ec33a4c41b1897e734c9c2cc8c9b3b2a","observation_id":"1e4f516d-2c74-48a1-af31-389c10156b43","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:561a5c76b8f8c549c6f878b202c629e493b211433bfd31dda8087b7ee0e561bc","observation_id":"c1f60e76-d5c7-4a00-89fd-aa630576d906","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.50","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"VisualWebArena: Evaluating multimodal agents on realistic visual web tasks","venue":null,"work_id":"7a18db33-5a35-436c-ba83-41b4602aea68","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:3d0e46f7195597453ed6c60b4a4ba3dd467899182c370b6c68d01edcd8a254a2","observation_id":"08f26523-7e45-4d0f-93cc-296fea96e965","resolution":{"observed_at":"2026-06-27T13:10:56.605996Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:6aee46cca8aed80ed498420a03d74b060f6eb15c3e80f5083826ba6baeeaa461","observation_id":"a1580967-39f5-42d6-8aba-cec2364d6462","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:9980fbc37c0c9904369da14a92aa85b57a07e401bb5d5cc4691ef000f64ec1e8","observation_id":"c46b24b5-396b-4a96-ae5f-4288d63af23b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:86209697cf1851e00aae9e486ddbe917c38c12459f110dad59af735dcae87915","observation_id":"4a9bffdd-2297-4854-899f-d1df58044265","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Agent Security Bench (","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d7c41e8b7c6153db3125d66e12b1321c546ade4a58986ebc268ee99eceef7279","observation_id":"e5d14cd2-7285-4e6f-b8b8-6dfdc2f7eae0","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.624","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T00:07:27.497937Z","title":"2024 , address =","venue":"Findings of the Association for Computational Linguistics ACL 2024","work_id":"31ff5463-bfee-4ce3-9d67-bd663318c94c","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d140de51fa9673adbb55d2274f93724039c0342b9c69f6313b06ced1498ef165","observation_id":"98245d0a-c0c9-4dd2-a28a-17e765001e4f","resolution":{"observed_at":"2026-06-27T13:10:56.617734Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-13T19:08:32.667474+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-13T19:08:32.667474+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Advances in Neural Information Processing Systems Datasets and Benchmarks Track , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:c621eca33379dca80b3546d831e9f8dd5b470ac36c3ab72ae862a9913c0245f0","observation_id":"aad70746-47bd-49ed-95ec-7e3c0460c1c7","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:85c280b754438e58b5877cd982ebd9b9fb1002e30a95da74cc2f84f5e1da7976","observation_id":"c560910d-2150-4659-a4e0-7d782a438a8f","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.1435","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in","venue":null,"work_id":"55863529-d65b-481f-b638-86c8e65a2a4e","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:05e34c8754367aedcc05cb18fa6cdb91508cfb4d20260925b262568adface6cb","observation_id":"6d23fe29-bbf4-4415-8ac2-715699885a31","resolution":{"observed_at":"2026-06-27T13:10:56.610772Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , eprint =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:5b6e3c72ac0020c9213d45c0975ccb4f56f6d510d86af54838b78d425f9209b5","observation_id":"01bcc545-c687-4d5e-ae34-415a40202740","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.06445","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T02:47:49.763520Z","title":"A survey on agentic security: Applications, threats and defenses","venue":null,"work_id":"fe273365-16e4-490b-8664-965ee3967b1f","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:469229413bb278445ee839be80380181f2f8a1fcded5f917d4be6e02f69e355d","observation_id":"beeca118-d736-4b8e-b81c-4edd9e7fcfd3","resolution":{"observed_at":"2026-07-03T05:57:41.938634Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-16T14:14:18.269562Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":"2604.02623","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-07-03T05:57:41.940009Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","venue":"cs.CR","work_id":"b00d3f50-24e0-4812-87e0-eb47767f463f","year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:18f4cd5a20221d7c66e235fc939e8d12c1552f69392b1ba5009fd7134caacd1f","observation_id":"218abb14-8f74-4be0-abde-73ca7e1e7e4e","resolution":{"observed_at":"2026-07-03T05:57:41.941287Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:53e851fb9e48f7908b7f8379da302e34e198276a63eb247018006a284d383eda","observation_id":"fc06c7ef-478f-408c-bd85-7e24414e644b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Engineering Applications of Artificial Intelligence , volume =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:a74fa2ac39c8079e57f231b79e602ab96bae4d48830ff4ad403e7b55767f746f","observation_id":"fb5afd76-57fc-43b3-a5fb-413a8d44eb56","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:8b33fa9ac36241833352de5a0ded9fb8c68dc2c42803269bc7ff9d8ce766b732","observation_id":"0a8c4cac-fbd0-40a2-bf2a-12f0b163104e","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.naacl-demo.36","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2025 , month = apr, address =","venue":null,"work_id":"992623ea-1db7-4db3-ab14-2834b2d12d61","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:6a72f0e73b2ef8c1aaa99a262133e23ecc62a13b418652d2ea7dbd48007b7c76","observation_id":"ca38401d-ab92-4689-a290-715c091305bd","resolution":{"observed_at":"2026-06-27T13:10:56.615987Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:a5e473344e85cc74fb2dac8e72c7e05e570e06112ab17b9e7b978eb4840eb1ba","observation_id":"fa66f752-c6d1-4fda-9160-76a0eb7ffff0","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:b7b63ce2822c49125a9edabe88b1e2535e8140c23ec8b38e0375bb52f7809ff9","observation_id":"e3b1ea8a-c8d4-4d04-99da-79c138faf9a9","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T01:03:30.490621Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":2,"unresolved":26,"verified_exact":8,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2606.10742."}