Paper Citation Record · LEDGER

Multi-step Jailbreaking Privacy Attacks on ChatGPT

As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 29 inbound Pith citation observations for arXiv:2304.05197.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2304.05197 v3

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 29 of 29 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 29 of 29 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T05:31:14.325060Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

23
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 204da7a1-74fc-4dbf-8820-6ce367f02093 · inbound

Jailbroken: How Does LLM Safety Training Fail? cites this paper.

Jailbroken: How Does LLM Safety Training Fail? Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-05-14T18:17:42.875300Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 491ec865-d4aa-4cee-a1d3-67c6f26efb66 · inbound

"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models cites this paper.

"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 42

Resolution: verified exact; arxiv_id, observed 2026-05-17T08:39:28.187529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 22aa7f8a-75c6-4e1c-8bb8-b3e5138b9891 · inbound

Baseline Defenses for Adversarial Attacks Against Aligned Language Models cites this paper.

Baseline Defenses for Adversarial Attacks Against Aligned Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-13T23:24:40.042862Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 87765850-f45c-4693-8675-f0980c4c5c32 · inbound

GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts cites this paper.

GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-15T06:25:21.059948Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0208d8b9-342c-45c0-b777-fadf982d748a · inbound

Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation cites this paper.

Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-16T22:00:51.560693Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 26fc97cf-6200-4b3e-b9f1-a3940bb92306 · inbound

TrustLLM: Trustworthiness in Large Language Models cites this paper.

TrustLLM: Trustworthiness in Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 277

Resolution: verified exact; arxiv_id, observed 2026-05-18T11:17:08.792092Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 2af2417c-cfaa-4663-8bfb-f254c35ef1df · inbound

Jailbreak Attacks and Defenses Against Large Language Models: A Survey cites this paper.

Jailbreak Attacks and Defenses Against Large Language Models: A Survey Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 48

Resolution: verified exact; arxiv_id, observed 2026-05-15T02:20:44.714757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 2df84383-6af1-4717-a0b3-27be0b89e95e · inbound

Peering Behind the Shield: Guardrail Identification in Large Language Models cites this paper.

Peering Behind the Shield: Guardrail Identification in Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-05-23T03:45:21.377951Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 34cecc57-b2a0-49b9-9b31-80218f7f3585 · inbound

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation cites this paper.

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-09T05:31:14.325060Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 69c29d1a-8897-4304-9e63-78f6bb46e2ba · inbound

KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs cites this paper.

KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-09T04:22:00.471038Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7e18a7c-af09-43e7-a55d-7dc2e77a5963 · inbound

Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning cites this paper.

Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T15:37:27.312304Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0a5b696-8e6d-41ff-a1ee-460b73b5c2e8 · inbound

Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework cites this paper.

Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T14:27:05.763058Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 227d56cf-4a72-4ca8-954f-adc32a8a8f80 · inbound

System Prompt Extraction Attacks and Defenses in Large Language Models cites this paper.

System Prompt Extraction Attacks and Defenses in Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.454592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b71f90d3-ed83-411a-953f-8f89b9ec73c1 · inbound

From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models cites this paper.

From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T12:34:34.521629Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ee003a4-d249-40a4-8d2b-ffcf7a084972 · inbound

SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation cites this paper.

SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 62

Resolution: unresolved; no resolver link, observed 2026-08-07T00:46:10.159449Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ec64b4f-08f6-42c6-a595-c514a2f21e81 · inbound

SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models cites this paper.

SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-06T23:20:53.545039Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 40754a9e-14de-4b14-8c84-e60493fb549b · inbound

Context-Aware CodeLLM Eviction for AI-assisted Coding cites this paper.

Context-Aware CodeLLM Eviction for AI-assisted Coding Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-06T23:20:21.849271Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56c20140-73a0-4ff4-9ef4-3d80d0683b38 · inbound

PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage cites this paper.

PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-06T20:36:46.757676Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3284897d-dcb6-4f19-94b1-f3889c235309 · inbound

`For Argument's Sake, Show Me How to Harm Myself!': Jailbreaking LLMs in Suicide and Self-Harm Contexts cites this paper.

`For Argument's Sake, Show Me How to Harm Myself!': Jailbreaking LLMs in Suicide and Self-Harm Contexts Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-06T21:05:19.409556Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dff63c40-38df-4b90-87f7-1e84646346d8 · inbound

ASSURE: Metamorphic Testing for AI-powered Browser Extensions cites this paper.

ASSURE: Metamorphic Testing for AI-powered Browser Extensions Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-06T19:43:28.259535Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 71226ad7-b208-4b86-9b7a-fdf73dd78354 · inbound

MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts? cites this paper.

MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts? Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-06T14:17:34.033208Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e00bf6b-3ea3-49c7-8290-047fa9be4ff3 · inbound

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation cites this paper.

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 125

Resolution: unresolved; no resolver link, observed 2026-08-05T20:31:44.379657Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ef35f386-b49d-4051-89c1-c0d2990413b2 · inbound

GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs cites this paper.

GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 20

Resolution: metadata mismatch; arxiv_id, observed 2026-05-18T21:36:52.522996Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0531ff80-7e34-4b9b-9aa5-b094f3650f56 · inbound

The Resurgence of GCG Adversarial Attacks on Large Language Models cites this paper.

The Resurgence of GCG Adversarial Attacks on Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-05T13:42:42.111230Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1fc3e1a8-895c-4e0f-8215-22f8b45590cc · inbound

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain cites this paper.

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-05T10:44:10.497463Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eae64ffb-36c8-45b9-9b02-97bbad674b2b · inbound

A First Look at the Security Issues in the Model Context Protocol Ecosystem cites this paper.

A First Look at the Security Issues in the Model Context Protocol Ecosystem Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-05-18T06:12:26.285817Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation a8cd7965-2239-46e6-80de-95c139b66f82 · inbound

Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks cites this paper.

Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 55

Resolution: verified exact; arxiv_id, observed 2026-05-21T12:10:06.533915Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 9704c824-fe30-4529-a2bf-ebd943e2ca1c · inbound

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense cites this paper.

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 108

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T12:45:44.876166Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation cea1207f-3ba8-4970-8da3-33735677e940 · inbound

Probing Memorization of Tabular In-Context Learning cites this paper.

Probing Memorization of Tabular In-Context Learning Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 46

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T09:25:40.859090Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.