Paper Citation Record · LEDGER

FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 32 inbound Pith citation observations for arXiv:2311.05608.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2311.05608 v3

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 32 of 32 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 32 of 32 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T11:17:01.577794Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

9
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation d6611326-d04b-4e0e-a9eb-3c0a32f7beac · inbound

Jailbreak Attacks and Defenses Against Large Language Models: A Survey cites this paper.

Jailbreak Attacks and Defenses Against Large Language Models: A Survey FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-05-15T02:20:44.644037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 20571498-ca2c-4d01-b1ad-cf4779b735d0 · inbound

AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions cites this paper.

AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 261

Resolution: verified exact; arxiv_id, observed 2026-05-23T21:55:49.827489Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0dcd471c-92c4-46e6-8864-473a96d2d4d7 · inbound

Peering Behind the Shield: Guardrail Identification in Large Language Models cites this paper.

Peering Behind the Shield: Guardrail Identification in Large Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 17

Resolution: verified exact; arxiv_id, observed 2026-05-23T03:45:21.421463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 8a28ffb6-f22f-4ade-aba3-4914e6ba9bfe · inbound

Universal Adversarial Attack on Aligned Multimodal LLMs cites this paper.

Universal Adversarial Attack on Aligned Multimodal LLMs FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-08T11:17:01.577794Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2b4a0320-2e8a-4784-bf05-44489b5580c7 · inbound

A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations cites this paper.

A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-07T19:45:18.513844Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a447fef4-d575-4fbf-b5c6-439c13bc93bd · inbound

RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion cites this paper.

RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-23T00:15:14.901879Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 103793a0-decc-44e8-bd1a-2f4d876afd11 · inbound

Backdoor Cleaning without External Guidance in MLLM Fine-tuning cites this paper.

Backdoor Cleaning without External Guidance in MLLM Fine-tuning FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T14:56:50.049188Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0a8124b6-20c0-41e0-a7c7-ed3b7ee9bce7 · inbound

Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework cites this paper.

Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-07T14:27:05.699522Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ff5cd9d-7983-411d-a328-87439cb68029 · inbound

VSCBench: Bridging the Gap in Vision-Language Model Safety Calibration cites this paper.

VSCBench: Bridging the Gap in Vision-Language Model Safety Calibration FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T14:13:11.421412Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 154a0da8-bb06-4901-b630-d98a7539b344 · inbound

Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack cites this paper.

Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T13:22:00.808067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c9a16fcf-f021-4a0c-a6cb-addc007f4cbc · inbound

Test-Time Immunization: A Universal Defense Framework Against Jailbreaks for (Multimodal) Large Language Models cites this paper.

Test-Time Immunization: A Universal Defense Framework Against Jailbreaks for (Multimodal) Large Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T13:17:20.261903Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 197b9f6a-0da3-4cf5-a240-b7adcd798e32 · inbound

From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models cites this paper.

From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T12:34:37.104583Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 15745a6e-fa80-4aa0-b09a-8879aa8366e6 · inbound

AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders cites this paper.

AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T12:35:26.878499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dacb2f80-318f-4ac3-bbe4-bcd682011472 · inbound

Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities cites this paper.

Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T12:07:59.166840Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68b78950-31ea-4ae7-a11a-c446900e07a2 · inbound

Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message cites this paper.

Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-06T19:46:25.203611Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 646bbd30-5388-4171-9b02-5d93ffeb2371 · inbound

Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World cites this paper.

Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-06T19:46:11.544437Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d549b25a-4dac-4f19-9750-9debf0272fd8 · inbound

Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities cites this paper.

Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-06T17:21:35.208807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4f27bd73-024c-4e13-adfe-8123bb08ea74 · inbound

Self-Aware Safety Augmentation: Leveraging Internal Semantic Understanding to Enhance Safety in Vision-Language Models cites this paper.

Self-Aware Safety Augmentation: Leveraging Internal Semantic Understanding to Enhance Safety in Vision-Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-06T12:40:05.291273Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ebab30ad-0dee-4a65-835b-e9d800498ce6 · inbound

Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security cites this paper.

Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-06T12:09:39.668500Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d510cf0d-ca3a-4b04-b357-685170176142 · inbound

The First Differentiable Transfer-Based Algorithm for Discrete MicroLED Repair cites this paper.

The First Differentiable Transfer-Based Algorithm for Discrete MicroLED Repair FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-05T22:21:02.779195Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9d54ccb-3003-4fc0-aa8a-ac732c816833 · inbound

Blockchain Network Analysis using Quantum Inspired Graph Neural Networks & Ensemble Models cites this paper.

Blockchain Network Analysis using Quantum Inspired Graph Neural Networks & Ensemble Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-05T21:22:36.936309Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5740cbd4-b93f-4ade-b1a0-87b323e0e519 · inbound

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation cites this paper.

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 110

Resolution: unresolved; no resolver link, observed 2026-08-05T20:31:43.152848Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c4b7143d-a5e2-4c76-abb8-656d7930f615 · inbound

Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models cites this paper.

Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-05T13:44:55.849334Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 065152dd-2878-42c2-ae83-a853d098f144 · inbound

When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models cites this paper.

When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-03T01:22:20.345146Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c782b4e9-3165-442d-a618-76714429a737 · inbound

The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Training cites this paper.

The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Training FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 19

Resolution: verified exact; arxiv_id, observed 2026-05-11T00:45:50.717999Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 33eee8d1-b51e-4d1d-ac56-a4ab45110693 · inbound

One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations cites this paper.

One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-05-11T23:21:15.062154Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation c4d9e311-7b61-4e74-90e8-cf1d6cfc511a · inbound

VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models cites this paper.

VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-05-11T16:56:08.044730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 1a793493-6053-4015-b0b5-66b60f0b1867 · inbound

Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing cites this paper.

Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 55

Resolution: metadata mismatch; arxiv_id, observed 2026-05-12T05:51:27.613031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 52479ce2-430d-4a5a-9cd6-745d42dcee2e · inbound

Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges cites this paper.

Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 82

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T01:27:31.023210Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation cce14d1e-e0ed-4e91-be22-99cc7cca0d5a · inbound

Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models cites this paper.

Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 18

Resolution: verified exact; arxiv_id, observed 2026-06-26T04:38:59.203237Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation bfae213e-9029-4b58-954f-127a92ef4fd2 · inbound

Securing Multimodal AI through Internal Information Decomposition cites this paper.

Securing Multimodal AI through Internal Information Decomposition FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-02T15:02:59.139372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d3a5ca68-e5e4-475a-9d0b-7ca49e3997bb · inbound

A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination cites this paper.

A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Reference 121

Resolution: unresolved; no resolver link, observed 2026-08-07T00:14:47.682360Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.