{"as_of":"2026-08-07T18:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f1719069d7a45e8038394cf7efd7fbd5ed7348eed02c45b97a7a711bb2be2694","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":23,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:11:04.716866Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T12:24:39.804121Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:4b3b51c11847de6b0110141b6cf7e3e3a9a587da8cc2fcc2e1ee38e0c0f31d5d","observation_id":"8dd62ce0-0f80-4fd5-8f9e-40e6611c3926","resolution":{"observed_at":"2026-05-23T20:58:26.029473Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2412.00404","last_updated":"2026-05-19T03:10:59Z","snapshot_observed_at":"2026-07-06T19:59:24.405557Z","submitted_at":"2024-11-30T09:05:02Z","title":"Hard-Label Black-Box Attacks on 3D Point Clouds","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-23T08:37:08.467026Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2412.00404"},"observation_digest":"sha256:17ff3f3eac49854c445748b807f6f96406b1014fe51838f764b9ef487ea1923f","observation_id":"c882a38d-0f9d-485d-b53a-65516bb50c15","resolution":{"observed_at":"2026-05-23T08:37:44.862049Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2503.06223","last_updated":"2026-08-06T06:47:13Z","snapshot_observed_at":"2026-08-07T18:21:15.151999Z","submitted_at":"2025-03-08T13:51:40Z","title":"RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion","version":5},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-23T00:13:08.603115Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2503.06223"},"observation_digest":"sha256:c166c52eae4c0f9f798738fcdebbad0f6baae292bfd2fe336bcfcd503127abe6","observation_id":"32b9ac69-e3d6-4b00-839f-61bdc561c601","resolution":{"observed_at":"2026-05-23T00:15:14.853288Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-07T15:11:04.716866Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16104","last_updated":"2025-07-22T10:32:33Z","snapshot_observed_at":"2026-08-07T15:04:38.066746Z","submitted_at":"2025-05-22T01:06:28Z","title":"Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T15:11:04.716866Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2505.16104"},"observation_digest":"sha256:0d6a059ea67b6560db1bd54b3213b326a44c8ec55ea74a273bc15afae709b9b8","observation_id":"76a19b3e-210a-4668-8a87-d24970af5263","resolution":{"observed_at":"2026-08-07T15:11:04.716866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-07T15:03:59.647228Z","title":"A survey of attacks on large vision-language models: Resources, advances, and future trends, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16640","last_updated":"2025-05-22T13:12:46Z","snapshot_observed_at":"2026-08-07T14:55:29.164249Z","submitted_at":"2025-05-22T13:12:46Z","title":"BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:03:59.647228Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2505.16640"},"observation_digest":"sha256:f7ca7a4750600bd80b45f5050c96006052a819503bf48b6ce86248e30ef3ff7b","observation_id":"dc243864-cd91-4efc-9c81-290fc99b70c8","resolution":{"observed_at":"2026-08-07T15:03:59.647228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-07T14:46:03.798834Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17654","last_updated":"2026-05-27T08:26:10Z","snapshot_observed_at":"2026-08-07T14:40:44.563063Z","submitted_at":"2025-05-23T09:18:01Z","title":"EVADE-Bench: Multimodal Benchmark for Evaluating and Enhancing Evasive Content Detection","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:46:03.798834Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2505.17654"},"observation_digest":"sha256:2ed20b572b5d407052c1066d5355b3b0190f7dd42669786f00c91a4bf408e1e7","observation_id":"cedc2a29-f36b-4b2d-a00c-e406fd72200d","resolution":{"observed_at":"2026-08-07T14:46:03.798834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-07T11:56:14.948476Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01064","last_updated":"2025-09-14T09:51:48Z","snapshot_observed_at":"2026-08-07T11:49:32.765393Z","submitted_at":"2025-06-01T16:07:30Z","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:56:14.948476Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2506.01064"},"observation_digest":"sha256:5f8f6b848277f39b171b511f70a02d71f50059bd3ce2b15bf420d2f80e017593","observation_id":"7fb282ec-aef9-4cc8-9396-e252390f3be7","resolution":{"observed_at":"2026-08-07T11:56:14.948476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-07T10:59:18.054582Z","title":"A survey of attacks on large vision-language models: Resources, advances, and future trends.arXiv preprint arXiv:2407.07403, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03933","last_updated":"2026-06-10T10:07:38Z","snapshot_observed_at":"2026-08-07T16:57:10.610923Z","submitted_at":"2025-06-04T13:26:33Z","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:59:18.054582Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2506.03933"},"observation_digest":"sha256:aa6ddc58545c4503c11f081f328af1378c7d9eb7b0533c1e1bb01e0e88ddee3f","observation_id":"311183e1-ba57-494f-b7ca-4fa9cfbb9f6b","resolution":{"observed_at":"2026-08-07T10:59:18.054582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T18:40:54.067388Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07709","last_updated":"2025-07-10T12:40:34Z","snapshot_observed_at":"2026-08-06T18:32:15.065716Z","submitted_at":"2025-07-10T12:40:34Z","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T18:40:54.067388Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.07709"},"observation_digest":"sha256:0dc1695442d4866afb717a2edb9290ffa8b806f4c3f40f5d05c0917d45a7f875","observation_id":"ed8edf02-b147-4fc6-ac77-8a5a5de05570","resolution":{"observed_at":"2026-08-06T18:40:54.067388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T18:03:01.862985Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.09334","last_updated":"2025-07-12T16:29:02Z","snapshot_observed_at":"2026-08-06T17:56:14.969465Z","submitted_at":"2025-07-12T16:29:02Z","title":"Fast3D: Accelerating 3D Multi-modal Large Language Models for Efficient 3D Scene Understanding","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T18:03:01.862985Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.09334"},"observation_digest":"sha256:6166c3603480e9e4331545278a2d1dd123551c29d73e168247e555ef050f3093","observation_id":"63d6651f-e8da-4f2f-b415-e3cce06f15ba","resolution":{"observed_at":"2026-08-06T18:03:01.862985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T12:23:03.941242Z","title":"arXiv e-prints, pages arXiv–2406","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.941242Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:f2fc73c4d533fae9d8f454430ff5bcf073484cd0d66e5f6df1c0fbcee23a6b6b","observation_id":"7142993e-7a9f-488d-bfc9-66bc3f31608c","resolution":{"observed_at":"2026-08-06T12:23:03.941242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T12:09:39.727842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22037","last_updated":"2025-07-29T17:39:48Z","snapshot_observed_at":"2026-08-06T15:54:16.679483Z","submitted_at":"2025-07-29T17:39:48Z","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-06T12:09:39.727842Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.22037"},"observation_digest":"sha256:aec803ba28905878a2c034e3b88af1280438150dd4e5c1d3d7fecfc7c30bcd27","observation_id":"be887a7a-fa2c-4f19-b28d-02fa7b34b7ba","resolution":{"observed_at":"2026-08-06T12:09:39.727842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T11:54:42.946018Z","title":"”A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends” arXiv preprint arXiv:2407.07403 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-06T16:29:30.639381Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.946018Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:09ba89029780831a2c774154bf5dd923cab69d98d8fbf0ef878b0bcdd099628e","observation_id":"88073051-5f25-467e-b525-4dcb62ae96af","resolution":{"observed_at":"2026-08-06T11:54:42.946018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-05T22:21:02.801582Z","title":"A survey of attacks on large vision-language models: Resources, advances, and future trends.arXiv preprint arXiv:2407.07403,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.09206","last_updated":"2025-08-10T00:55:54Z","snapshot_observed_at":"2026-08-07T04:17:09.015854Z","submitted_at":"2025-08-10T00:55:54Z","title":"The First Differentiable Transfer-Based Algorithm for Discrete MicroLED Repair","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T22:21:02.801582Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2508.09206"},"observation_digest":"sha256:28708cfb5dd306216c6b74da2a749921f509c4c9e65063b00bdad37d53caa239","observation_id":"cd77eacb-4564-4c74-b403-f36417a61e67","resolution":{"observed_at":"2026-08-05T22:21:02.801582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-05T20:31:45.892114Z","title":"A survey of attacks on large vision-language models: Resources, advances, and future trends","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-07T14:42:27.926127Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":143,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:45.892114Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:d0312f2db8fcf9ce33d2eced9e9a96193953b8accb7e60725aa9a3ad0c52150a","observation_id":"6ada323d-15db-4664-b52f-06f645d8c4c9","resolution":{"observed_at":"2026-08-05T20:31:45.892114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2509.15435","last_updated":"2026-05-19T14:30:01Z","snapshot_observed_at":"2026-07-06T22:30:17.163909Z","submitted_at":"2025-09-18T21:17:23Z","title":"ORCA: An Agentic Reasoning Framework for Hallucination and Adversarial Robustness in Vision-Language Models","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-18T15:23:13.318310Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2509.15435"},"observation_digest":"sha256:39c51a3e75882099240ede6c62341c5d6195007344bf4b1191303461a636bebc","observation_id":"3e27a6b0-49c7-4296-a9fd-67485edf0f45","resolution":{"observed_at":"2026-05-18T15:26:33.861908Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2509.15435","last_updated":"2026-05-19T14:30:01Z","snapshot_observed_at":"2026-07-06T22:30:17.163909Z","submitted_at":"2025-09-18T21:17:23Z","title":"ORCA: An Agentic Reasoning Framework for Hallucination and Adversarial Robustness in Vision-Language Models","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-21T21:28:59.898029Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2509.15435"},"observation_digest":"sha256:60217a2bd22eb1fa06374f2a59ea2160139f83fe25990097eb8efee014197f9e","observation_id":"e22cb968-630e-44fe-9025-d5ae556e722c","resolution":{"observed_at":"2026-05-21T21:30:39.447565Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-04T13:52:15.314824Z","title":"A survey of at- tacks on large vision-language models: Resources, advances, and future trends.arXiv preprint arXiv:2407.07403, 2024a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.24566","last_updated":"2026-07-16T09:55:58Z","snapshot_observed_at":"2026-08-04T13:52:12.156088Z","submitted_at":"2025-09-29T10:19:22Z","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-04T13:52:15.314824Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2509.24566"},"observation_digest":"sha256:29866dc4486eb703b7d358c0b3c220ec2acd71a18d96909fbaaa413c2a4a7b19","observation_id":"2846145d-382b-4083-8fa0-224cc3195575","resolution":{"observed_at":"2026-08-04T13:52:15.314824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-02T22:03:49.351667Z","title":"Do Anything Now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.18154","last_updated":"2026-06-11T12:26:22Z","snapshot_observed_at":"2026-08-05T23:49:37.189747Z","submitted_at":"2026-02-20T11:40:41Z","title":"FENCE: A Financial and Multimodal Jailbreak Detection Dataset","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T22:03:49.351667Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2602.18154"},"observation_digest":"sha256:a128e8a9f7b559c12dbd96e1238e291f6c30db8b9cc32169a7155a455e3e4211","observation_id":"a29357e8-e064-431b-86bd-8b2f39bb2024","resolution":{"observed_at":"2026-08-02T22:03:49.351667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-07-13T14:09:20.967908Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01886","last_updated":"2026-06-30T08:04:58Z","snapshot_observed_at":"2026-07-13T14:09:20.726738Z","submitted_at":"2026-04-02T10:47:01Z","title":"When does learning pay off? A study on DRL-based dynamic algorithm configuration for carbon-aware scheduling","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-13T14:09:20.967908Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2604.01886"},"observation_digest":"sha256:d14e6d5accecec3e8abf8bfc42af5f46d6e4c64d9316c2dec989d4f1396e5253","observation_id":"a16e3c19-3995-4325-a328-36701531f6ed","resolution":{"observed_at":"2026-07-13T14:09:20.967908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2604.02689","last_updated":"2026-04-03T03:32:55Z","snapshot_observed_at":"2026-07-06T22:52:02.162758Z","submitted_at":"2026-04-03T03:32:55Z","title":"Efficient3D: A Unified Framework for Adaptive and Debiased Token Reduction in 3D MLLMs","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-13T19:45:33.950587Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2604.02689"},"observation_digest":"sha256:37071692f2dd5191e09ac4aa048975487799602707162638b3424d96a590cd50","observation_id":"f83ad23b-de4e-498a-be5c-1cef73021209","resolution":{"observed_at":"2026-05-13T19:48:11.418356Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2605.14291","last_updated":"2026-05-14T02:49:27Z","snapshot_observed_at":"2026-08-05T12:24:07.736176Z","submitted_at":"2026-05-14T02:49:27Z","title":"To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Model","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-05-15T02:38:37.358485Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2605.14291"},"observation_digest":"sha256:3b2af8215705578f1c010b4cbb75fbd517557c963df44c167d1191ff11fb3833","observation_id":"c294da9f-1e67-4451-92f9-69a9a63ba734","resolution":{"observed_at":"2026-05-15T02:39:40.903845Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":"2407.07403","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-06-30T12:24:39.804121Z","title":"A survey of attacks on large vision- language models: Resources, advances, and future trends","venue":null,"work_id":"b7f32873-7a01-4b8e-87dd-3d96f75cf380","year":2024},"citing_paper":{"arxiv_id":"2605.25194","last_updated":"2026-05-24T17:51:34Z","snapshot_observed_at":"2026-07-06T23:35:11.987278Z","submitted_at":"2026-05-24T17:51:34Z","title":"Localization then Neutralization: Gradient-guided Token Suppression against Visual Prompt Injection Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-30T12:19:12.910048Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2605.25194"},"observation_digest":"sha256:84ea12f43a9018aee710a5f7700bcb2112dec2d8cac688aea9e2db6fa78fc5ee","observation_id":"e6c5f2d4-11c2-495d-9b25-64befe1c7f95","resolution":{"observed_at":"2026-06-30T12:24:39.805804Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2407.07403/citation-record","integrity":"/paper/2407.07403/integrity","json":"/paper/2407.07403/citation-record.json","paper":"/paper/2407.07403"},"outbound":[],"paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 23 inbound Pith citation observations for arXiv:2407.07403."}