{"as_of":"2026-08-11T16:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a3ca0f64f68a9cf613778e6818638677c2cf1c64852a1e6846317b6071102863","coverage":[{"denominator":165,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:40:18.992038Z","state":"measured"},{"denominator":101,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":101,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-15T13:15:31.225992Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.20087","snapshot_observed_at":"2026-07-15T13:15:31.225992Z","title":"Available: https://arxiv.org/abs/2412.20087","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2603.07457","last_updated":"2026-03-08T04:16:06Z","snapshot_observed_at":"2026-08-08T01:21:30.388475Z","submitted_at":"2026-03-08T04:16:06Z","title":"How Well Do AI Systems Solve AP Physics? A Comparative Evaluation of Large Language Models on Algebra-Based Free Response Questions","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-15T13:15:31.225992Z"},"links":{"cited_paper":"/paper/2412.20087","citing_paper":"/paper/2603.07457"},"observation_digest":"sha256:c6b1e361bcceeee74bebf642b248beb83c19114f6e0b46e9fb69656802746210","observation_id":"2182fa6b-c542-427b-b76a-fb0c1158b3d8","resolution":{"observed_at":"2026-07-15T13:15:31.225992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2412.20087/citation-record","integrity":"/paper/2412.20087/integrity","json":"/paper/2412.20087/citation-record.json","paper":"/paper/2412.20087"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.12503","last_updated":"2025-06-11T23:27:36Z","snapshot_observed_at":"2026-08-11T03:07:27.568044Z","submitted_at":"2024-03-19T07:10:58Z","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12503","snapshot_observed_at":"2026-08-10T23:40:18.643266Z","title":", author Anarfi, R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.643266Z"},"links":{"cited_paper":"/paper/2403.12503","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:1b8d0f3298c679662ee7dd58e51c7d09ddb13487bcebcc5b36e888ca7b17dd09","observation_id":"a1f1ab12-2663-4804-88a6-9cdf23734462","resolution":{"observed_at":"2026-08-10T23:40:18.643266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-10T11:04:18.421023Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-10T23:40:18.648145Z","title":", author Croce, F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.648145Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:c699daf9ed790649965c997bc4b8cb5171e940bfaba6b45e004054cfc8b584ec","observation_id":"d0e32831-56dd-4011-96fc-38921f5d6463","resolution":{"observed_at":"2026-08-10T23:40:18.648145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.652053Z","title":", author Johnson, W.A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.652053Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e7b9fa878128398adff9ae787655e099aebbb95ebf1112cd202064844d6e9bb2","observation_id":"43002725-a93c-40b7-bc7a-e7e49512140b","resolution":{"observed_at":"2026-08-10T23:40:18.652053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.655780Z","title":", author Mahmoud, M.M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.655780Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:84443fcc6a36a0c4d087202de0a36fc9a525699074794a14300fb80b03c8bd94","observation_id":"5f8452dd-05aa-4dad-9952-9200e71b34ea","resolution":{"observed_at":"2026-08-10T23:40:18.655780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-10T23:40:18.659212Z","title":", author Hsieh, T.Y","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.659212Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:bbbe4b06e2059c147c7c236b79eedd4043b00518f0329a789797e08e88cf9ad9","observation_id":"06e47585-a777-49c9-bdda-83837781c14f","resolution":{"observed_at":"2026-08-10T23:40:18.659212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10496","last_updated":"2021-02-21T03:13:27Z","snapshot_observed_at":"2026-07-06T10:43:11.902082Z","submitted_at":"2021-02-21T03:13:27Z","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10496","snapshot_observed_at":"2026-08-10T23:40:18.663559Z","title":", author Wu, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.663559Z"},"links":{"cited_paper":"/paper/2102.10496","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:64ea97377f2f6e71caa672802ab50ce301e9b0ce5ade58460bec4fb4df8af197","observation_id":"f296c00a-4809-499b-995b-ad6a2724722a","resolution":{"observed_at":"2026-08-10T23:40:18.663559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.05530","last_updated":"2024-08-06T14:30:31Z","snapshot_observed_at":"2026-08-11T03:07:34.583224Z","submitted_at":"2024-04-08T13:59:02Z","title":"Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.05530","snapshot_observed_at":"2026-08-10T23:40:18.667825Z","title":", author Gao, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.667825Z"},"links":{"cited_paper":"/paper/2404.05530","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:61528e5425c3ee7e3c8ca9a885734343c492ea1f7316b5c124a9fd3dc152ff39","observation_id":"537888dd-05cd-4539-a3fe-422b4264b677","resolution":{"observed_at":"2026-08-10T23:40:18.667825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1206.6389","last_updated":"2013-03-25T10:16:36Z","snapshot_observed_at":"2026-07-06T02:50:47.096675Z","submitted_at":"2012-06-27T19:59:59Z","title":"Poisoning Attacks against Support Vector Machines","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1206.6389","snapshot_observed_at":"2026-08-10T23:40:18.671656Z","title":", author Nelson, B","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.671656Z"},"links":{"cited_paper":"/paper/1206.6389","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:92db6f40cefb31d70fd6ef68d1ed7fd984e8d3b04e212a13741314b6f904f8c6","observation_id":"76ab6ae8-d09a-4444-8743-dbc0009be52b","resolution":{"observed_at":"2026-08-10T23:40:18.671656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.675071Z","title":", year 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.675071Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:343a5c1a41e86fdb96c2144e7b9586eac1878b33dcf0ecf1a9a7ba591a8fc81c","observation_id":"9aa9265e-02be-4542-9738-e091311e0dbe","resolution":{"observed_at":"2026-08-10T23:40:18.675071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.679045Z","title":", author Mann, B","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.679045Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:cb590c348400457c3628ab0185b3701dd3f94ad08786bb6e7e8e6adf8b2951c4","observation_id":"b5c3f8fe-d654-4caa-a3cb-82ea829ce422","resolution":{"observed_at":"2026-08-10T23:40:18.679045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.03570","last_updated":"2022-04-12T16:50:11Z","snapshot_observed_at":"2026-08-10T09:08:25.900736Z","submitted_at":"2021-12-07T08:47:00Z","title":"Membership Inference Attacks From First Principles","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.03570","snapshot_observed_at":"2026-08-10T23:40:18.682934Z","title":", author Chien, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.682934Z"},"links":{"cited_paper":"/paper/2112.03570","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e0c0c9269787c325b3b0dd09ea5d1ca3d2d0e4ea515a44cdc3a93be4d48561b1","observation_id":"eb5525ef-4f77-4859-9238-b125e3fab6c7","resolution":{"observed_at":"2026-08-10T23:40:18.682934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.686543Z","title":", author Tram \\`e r, F","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.686543Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e2f1b78979ffbb53b37208d362b5a2359f0b8c3d1e283931d5a2ff8ef290f5bc","observation_id":"6b25a6d7-7e87-4e67-968d-108b2ef9fe48","resolution":{"observed_at":"2026-08-10T23:40:18.686543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.689874Z","title":", author Wagner, D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.689874Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:38a05f8520148dd97d1a0903b3cc8bd43365c54824c632cdd6eed88ecb3976e2","observation_id":"92ed08c3-6728-46cd-bf91-4b5ff8c5d0b0","resolution":{"observed_at":"2026-08-10T23:40:18.689874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.693442Z","title":", author Wagner, D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.693442Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:2809296c64b6890f17ab322688bb7ad8727a952aae72aa8ec3f08154e12e8431","observation_id":"bb2d5a19-6c9d-436d-ae4b-22cb5bf437df","resolution":{"observed_at":"2026-08-10T23:40:18.693442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.696722Z","title":", author Wagner, D","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.696722Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:543e5cb37b0cbc0d10891d22357de46cd839686866c7cd8437baf5045543a967","observation_id":"2717099a-c1f4-4e70-9ed7-daf610bd9cfe","resolution":{"observed_at":"2026-08-10T23:40:18.696722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.699982Z","title":", author Wagner, D","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.699982Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:efe7a6b7f47cb93ec86224ef0d727778c5489998d0bbe6dcc0863ee6e1b3e996","observation_id":"9742ba3f-60e1-4e69-a314-a05c321b92eb","resolution":{"observed_at":"2026-08-10T23:40:18.699982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2101.08030","last_updated":"2021-01-20T08:58:29Z","snapshot_observed_at":"2026-08-11T03:10:01.906836Z","submitted_at":"2021-01-20T08:58:29Z","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.08030","snapshot_observed_at":"2026-08-10T23:40:18.703164Z","title":", author Anunciacao, O","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.703164Z"},"links":{"cited_paper":"/paper/2101.08030","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f82e28b925c855231155ed90a76e0424de76c4e679d5cb6f0a0a3ebc3696136f","observation_id":"7d004fd5-9ea8-4ea0-96b2-d3d7b384fc68","resolution":{"observed_at":"2026-08-10T23:40:18.703164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1049/cit2.12026","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:19.301210Z","title":", author Danger, J.L","venue":null,"work_id":"8cb09869-0947-4ed3-91b9-d8e447da4d59","year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.706525Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:28fec1d13a0ad51e79c982b5c8d26897c217d074ddb15cd006d04a361783a132","observation_id":"065356a3-5bd0-434b-9618-b923c771cbfe","resolution":{"observed_at":"2026-08-10T23:40:19.305389Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-10T23:40:18.709799Z","title":", author Robey, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.709799Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:81d8f4c429d40def7be8f8d6978383b9a17ec2863e96af3bff92efc5e222aa7e","observation_id":"35decfe3-3094-4e20-b53b-8ab9f78cedc3","resolution":{"observed_at":"2026-08-10T23:40:18.709799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.713455Z","title":", author Fu, C","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.713455Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:276947df62df958dfc2f15b759e585f24e570b38ec0a294004a53d158be7b846","observation_id":"e17df67c-109f-45de-890b-f4a1f1590844","resolution":{"observed_at":"2026-08-10T23:40:18.713455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.716788Z","title":", author Zeng, Y","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.716788Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e140285c9d58970e15841316088a9c2cc08777353d59a995b7a0f822be3b155c","observation_id":"6d0f585d-e345-41f6-a19d-5705f5427ae0","resolution":{"observed_at":"2026-08-10T23:40:18.716788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.719962Z","title":", author Barron, T.M","venue":null,"work_id":null,"year":1994},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.719962Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:ca3310fbd77ffc421e5bfdc49ae35f718772bdf7784802023e1e0bfa7b3906b7","observation_id":"cbbb07e2-36fa-451b-8135-3d3976b732b1","resolution":{"observed_at":"2026-08-10T23:40:18.719962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04756","last_updated":"2025-05-20T02:09:07Z","snapshot_observed_at":"2026-08-10T04:36:47.937530Z","submitted_at":"2024-12-06T03:45:49Z","title":"ChatNVD: Advancing Cybersecurity Vulnerability Assessment with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04756","snapshot_observed_at":"2026-08-10T23:40:18.723258Z","title":", author Ahmad, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.723258Z"},"links":{"cited_paper":"/paper/2412.04756","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:fc5e07381afdb606f28a86c547208126ae1c0d21ba382345e71b3acc72d0d666","observation_id":"998e4cfe-f358-405d-9a69-2be9d8a00a27","resolution":{"observed_at":"2026-08-10T23:40:18.723258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05668","last_updated":"2025-05-26T12:56:04Z","snapshot_observed_at":"2026-08-10T23:28:02.754591Z","submitted_at":"2024-02-08T13:42:50Z","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05668","snapshot_observed_at":"2026-08-10T23:40:18.726600Z","title":", author Liu, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.726600Z"},"links":{"cited_paper":"/paper/2402.05668","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:ce2cd339000984f1fe63482d65a7dc39a968c1d0ff6f839f2a4cfbd9f5f83102","observation_id":"4488fc2b-7faa-4164-8ae8-c30613d10a05","resolution":{"observed_at":"2026-08-10T23:40:18.726600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.729937Z","title":", author Li, H","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.729937Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:15c4ab055670b1ace11a0ee099c92818900f72c5b3e4b307b73f070c943e6958","observation_id":"b4a4ee5b-1d72-45d1-9efe-4052addf347a","resolution":{"observed_at":"2026-08-10T23:40:18.729937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.733279Z","title":", author Tariq, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.733279Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:d0e720fca3d73197662b00fc125dd08f1b8154b388e859ff8a424706c38e2b34","observation_id":"9e6fd331-f679-435b-9e95-96609f323033","resolution":{"observed_at":"2026-08-10T23:40:18.733279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08715","last_updated":"2023-10-25T07:30:51Z","snapshot_observed_at":"2026-08-11T04:58:43.785083Z","submitted_at":"2023-07-16T01:07:15Z","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08715","snapshot_observed_at":"2026-08-10T23:40:18.736547Z","title":", author Liu, Y","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.736547Z"},"links":{"cited_paper":"/paper/2307.08715","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:0af032c339df309c32e5facaa2ec7c7da39bb11930f886521e1495338efb4a69","observation_id":"cf6edc23-015f-4d28-be21-1668db79df10","resolution":{"observed_at":"2026-08-10T23:40:18.736547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.739598Z","title":", author Liu, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.739598Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:11aefe219fd570ca595a07e6c86ea830572b085fad63f5636e35e30a7e58d968","observation_id":"af825157-d09d-4b32-9768-e65ac4347c0f","resolution":{"observed_at":"2026-08-10T23:40:18.739598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-10T23:40:18.742729Z","title":", year 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.742729Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:87f53f25471c182b20e7af02eceddb5061657a80924cf3fe2e0bc9e9dc219760","observation_id":"87326a0b-1d70-481e-a778-d7ebb6f50084","resolution":{"observed_at":"2026-08-10T23:40:18.742729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-10T23:40:18.746365Z","title":", author Kuang, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.746365Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:73788e711fef3c74be3555215261f0e02d44f41f2cd53eb8d8a5f354440c0d11","observation_id":"4626db44-3609-44af-9a0d-29f3df6d4ecc","resolution":{"observed_at":"2026-08-10T23:40:18.746365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.749962Z","title":", author Tian, Y","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.749962Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:d23328a55ed209662ba583a432b027553fb81495f50b4270668eebd52f2f6d4d","observation_id":"68778429-d226-4133-b06c-c651075a60ff","resolution":{"observed_at":"2026-08-10T23:40:18.749962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.753216Z","title":", author Dong, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.753216Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:6966da6bfcd2bb23bb15158cd5da3bec274f5a5806406a5b3489a17e013fcd4b","observation_id":"0388e491-9e51-4afc-a5d8-8809c860e762","resolution":{"observed_at":"2026-08-10T23:40:18.753216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.756273Z","title":", author Liao, F","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.756273Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:1f0ae8224a47cfa28ba3d5e3b3a8ec16c5b6e28e9d8898fd9c68436122ecb2d9","observation_id":"d80469e7-7dd0-498e-9915-24ddaf3628e5","resolution":{"observed_at":"2026-08-10T23:40:18.756273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.759522Z","title":", author Zhao, Y","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.759522Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:dd0e36f1d8bdeaa4c95eb090e7dd793a7f8ab367f572531aad30bfe054f8c236","observation_id":"c5b35189-4123-4972-9ed0-3ddcbb2b988e","resolution":{"observed_at":"2026-08-10T23:40:18.759522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04127","last_updated":"2024-02-23T07:32:27Z","snapshot_observed_at":"2026-08-11T03:07:30.734637Z","submitted_at":"2023-12-07T08:29:58Z","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04127","snapshot_observed_at":"2026-08-10T23:40:18.762886Z","title":", author Zhao, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.762886Z"},"links":{"cited_paper":"/paper/2312.04127","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:7b2f6ec7381bf1dbf8bdd4362bc2fa2f6a61e5ea20a2b32c90ed7ba6460f441a","observation_id":"4e2b03e1-1221-41b8-97ea-59b72c911c25","resolution":{"observed_at":"2026-08-10T23:40:18.762886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09910","last_updated":"2024-06-25T10:33:41Z","snapshot_observed_at":"2026-08-11T03:10:30.141160Z","submitted_at":"2024-02-15T12:17:15Z","title":"DE-COP: Detecting Copyrighted Content in Language Models Training Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09910","snapshot_observed_at":"2026-08-10T23:40:18.766132Z","title":", author Zhao, X","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.766132Z"},"links":{"cited_paper":"/paper/2402.09910","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f744555a39451de88355f3c0205453531b9c43fa07f1be6029549b3ee4468402","observation_id":"258a3b3b-3f90-4d57-b407-59c910c9a5f5","resolution":{"observed_at":"2026-08-10T23:40:18.766132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-10T23:40:18.769741Z","title":", author Jauhri, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.769741Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:de2b34b69848c26715d47c573145c971f88f1e6ce0f17be5aa9b242c767e4a9c","observation_id":"31908427-ed57-476f-9e55-c31dd8c7de64","resolution":{"observed_at":"2026-08-10T23:40:18.769741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-09T04:03:23.171418Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-10T23:40:18.773523Z","title":", author Rao, A","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.773523Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:2e0444f454b20df70e32f971bc337d539d4c473269b461fe0eb27922b946a516","observation_id":"14a19a5b-122e-4696-9a8b-04eb27e12a93","resolution":{"observed_at":"2026-08-10T23:40:18.773523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.11508","last_updated":"2020-06-10T12:20:04Z","snapshot_observed_at":"2026-08-11T03:08:48.630865Z","submitted_at":"2019-03-27T16:01:18Z","title":"Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1903.11508","snapshot_observed_at":"2026-08-10T23:40:18.776940Z","title":", author Şahin, G.G","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.776940Z"},"links":{"cited_paper":"/paper/1903.11508","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f2ec6976a02eaa3dff9df1e859e3ee757392854daca7b9aab30cbf70cf291a86","observation_id":"219132aa-dc5f-4f2e-826b-ed91ea881ba6","resolution":{"observed_at":"2026-08-10T23:40:18.776940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.780338Z","title":", author Evtimov, I","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.780338Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:cae62c6a4aa11df94ddbe78f670c976c3c562cf5ea93cedc7e896c5fcfeeef60","observation_id":"fc04d8c1-0166-4993-9487-0f6b4f4dc192","resolution":{"observed_at":"2026-08-10T23:40:18.780338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.784181Z","title":", author Wang, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.784181Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:4f30507060555e6fec29c132557e9d66b795826738703bc4dfe59c074044ff20","observation_id":"fdbd7952-eb6b-4dac-bda4-b1ec1364f8f4","resolution":{"observed_at":"2026-08-10T23:40:18.784181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.787427Z","title":", author Bowers, J.D","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.787427Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:3669d30612a58348f3048c1efaeeaf5721a52d42ce6207b92306bd4a893bf413","observation_id":"2f1541cd-5554-4ec4-ae2f-d6e797f6d8ce","resolution":{"observed_at":"2026-08-10T23:40:18.787427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.790573Z","title":"title C V S S v3.1 U ser G uide --- first.org","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.790573Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:4f8c6e832d428b904876398a3ee9ee5ceed187c754c404be790ec37a60a99e40","observation_id":"d70d7df3-86f5-42fd-b142-6c0765682c7f","resolution":{"observed_at":"2026-08-10T23:40:18.790573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06062","last_updated":"2024-11-26T03:19:15Z","snapshot_observed_at":"2026-08-10T09:25:53.294934Z","submitted_at":"2023-11-10T13:55:05Z","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06062","snapshot_observed_at":"2026-08-10T23:40:18.793634Z","title":", author Wang, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.793634Z"},"links":{"cited_paper":"/paper/2311.06062","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:76bb131791f4a7e72c0ef263253603533400c6c18b172a87fd4a56597969cb0b","observation_id":"1657f171-333a-4df9-8c06-769c5f9b8c6a","resolution":{"observed_at":"2026-08-10T23:40:18.793634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.796958Z","title":", author Ramakrishnan, G","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.796958Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f79700daac9cab9619f19016d947c10469c81204c2d5b328ba9d362b342929a3","observation_id":"51aa7fb1-1267-407a-b78e-6f24ba9f8bc5","resolution":{"observed_at":"2026-08-10T23:40:18.796958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.02276","last_updated":"2021-05-10T15:58:21Z","snapshot_observed_at":"2026-08-11T03:10:31.503893Z","submitted_at":"2020-09-04T16:17:54Z","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.02276","snapshot_observed_at":"2026-08-10T23:40:18.800470Z","title":", author Fowl, L","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.800470Z"},"links":{"cited_paper":"/paper/2009.02276","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:87c45810affd6f34be50da6fad7cc0377a51ba5f8e8e27dfef55755c14c0054f","observation_id":"51302d53-8ecb-49fe-9bd4-df7e570cd22c","resolution":{"observed_at":"2026-08-10T23:40:18.800470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09154","last_updated":"2025-03-03T09:37:27Z","snapshot_observed_at":"2026-08-11T03:07:29.687177Z","submitted_at":"2024-02-14T13:13:26Z","title":"Attacking Large Language Models with Projected Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09154","snapshot_observed_at":"2026-08-10T23:40:18.803840Z","title":", author Wollschläger, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.803840Z"},"links":{"cited_paper":"/paper/2402.09154","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:389ad1084c1ccb5509037b48dfb7ed9bee4973d44530d3ddd3b1c2665bada821","observation_id":"d32d0ce5-0404-4151-80cb-80fb5e2ceb31","resolution":{"observed_at":"2026-08-10T23:40:18.803840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.807134Z","title":", author \\\"O zuysal, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.807134Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:9b757276c90ef60e8a2853ce68a92b9db3ed69e20924dafe1c8f12bb39804ae4","observation_id":"a5b0f19c-07a5-48b1-aaca-192dd707d129","resolution":{"observed_at":"2026-08-10T23:40:18.807134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T23:40:18.810215Z","title":", author Shlens, J","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.810215Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:3be524446f5ceba75181e728a12497282df9af0c3dd1e8763bcfc768d92f368e","observation_id":"d742e975-c81c-47e9-aa98-a6c015c97fcf","resolution":{"observed_at":"2026-08-10T23:40:18.810215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-10T23:40:18.817469Z","title":", author Abdelnabi, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.817469Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:d7c19124d825581e1b501e39aeb062784f124db4177b928ded3aacbe2f38209b","observation_id":"bf5736f7-5443-4adf-b73e-266f23064d0b","resolution":{"observed_at":"2026-08-10T23:40:18.817469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.820493Z","title":", author Liu, K","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.820493Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:2eae6bd1cd4707ecd450697d9840d69fa18613126d79e540cfbef3b10285135a","observation_id":"114fc76c-dfeb-4aed-88df-bb5839a20ccd","resolution":{"observed_at":"2026-08-10T23:40:18.820493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.13733","last_updated":"2021-04-15T17:43:43Z","snapshot_observed_at":"2026-08-11T10:07:49.426481Z","submitted_at":"2021-04-15T17:43:43Z","title":"Gradient-based Adversarial Attacks against Text Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.13733","snapshot_observed_at":"2026-08-10T23:40:18.827110Z","title":", author Sablayrolles, A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.827110Z"},"links":{"cited_paper":"/paper/2104.13733","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:822e8825979d3f04e1530f3bec45c2db937a8085fea56b9c05ba60c86c305fe0","observation_id":"2dbe7eae-7739-4e0e-9532-272258a68256","resolution":{"observed_at":"2026-08-10T23:40:18.827110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-11T03:10:02.344730Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-08-10T23:40:18.830032Z","title":", author Borevkovic, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.830032Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:93b799993b7da6ae8de9dc4423cbd2056f6dbcaa4292b811bc4f412e95e91c61","observation_id":"3a0a79c3-723a-44f8-953a-e9ddaf6d0285","resolution":{"observed_at":"2026-08-10T23:40:18.830032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.833422Z","title":", author Salcic, Z","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.833422Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:d13bcc0188070a07b90703bfbe45026d34649d94ef00d378696f44c40adc031a","observation_id":"76ddbcf3-fc31-462e-a04d-7fe748d2bf35","resolution":{"observed_at":"2026-08-10T23:40:18.833422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07676","last_updated":"2024-03-30T16:09:34Z","snapshot_observed_at":"2026-08-11T03:09:58.615441Z","submitted_at":"2023-10-11T17:21:03Z","title":"Composite Backdoor Attacks Against Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07676","snapshot_observed_at":"2026-08-10T23:40:18.836509Z","title":", author Zhao, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.836509Z"},"links":{"cited_paper":"/paper/2310.07676","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:72a5fee0ea921ab51d0e2fcd3f16ae604807482ea9be5c21080a1a56b635a25d","observation_id":"d3f05bab-503d-4a29-9f60-4da162086408","resolution":{"observed_at":"2026-08-10T23:40:18.836509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.839850Z","title":", author Geiping, J","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.839850Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:8365b1c7a66c9390933e2ebc3474f7d8615f9dbb579310fa5d20274a72c2350c","observation_id":"54392d6c-533a-4cc2-8755-ade2635be6fc","resolution":{"observed_at":"2026-08-10T23:40:18.839850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07140","last_updated":"2020-01-05T12:39:05Z","snapshot_observed_at":"2026-07-06T08:37:34.306401Z","submitted_at":"2019-11-17T03:10:49Z","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07140","snapshot_observed_at":"2026-08-10T23:40:18.843186Z","title":", author Zhang, T","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.843186Z"},"links":{"cited_paper":"/paper/1911.07140","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:051651ae96c98c8ec35a60cb581e56bd495250b1bf3579d0b3f4df33747e2f17","observation_id":"7167bb90-eae9-432e-a68d-fd067608cda2","resolution":{"observed_at":"2026-08-10T23:40:18.843186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.02621","last_updated":"2023-03-21T14:10:36Z","snapshot_observed_at":"2026-08-11T03:07:38.541436Z","submitted_at":"2019-11-06T20:29:56Z","title":"The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.02621","snapshot_observed_at":"2026-08-10T23:40:18.846600Z","title":", author Abou-Khamis, R","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.846600Z"},"links":{"cited_paper":"/paper/1911.02621","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:068bf7701d2eee82347661869534ed9cbaf5f0f1dc36428cf680a9b8589bbd3e","observation_id":"4482f886-8824-498e-810d-bf44651e00dc","resolution":{"observed_at":"2026-08-10T23:40:18.846600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.850085Z","title":", year 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.850085Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:0ed5fd12e94157808c9cfe1da2bca9435c1525a3873c0100e6237dabaf97c36e","observation_id":"fd6b2a76-091d-40ba-93ea-380fdbfb685b","resolution":{"observed_at":"2026-08-10T23:40:18.850085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.853296Z","title":", author Carlini, N","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.853296Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:98ea1c0ec0bc607a92f636e23537a12ba4792e7b06e4391c04a99f4e4b0bd3d0","observation_id":"afd32ca4-0643-4926-b39d-00ac5b948e85","resolution":{"observed_at":"2026-08-10T23:40:18.853296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04801","last_updated":"2025-02-09T19:38:18Z","snapshot_observed_at":"2026-08-11T03:08:20.134748Z","submitted_at":"2024-03-05T19:32:01Z","title":"Alpaca against Vicuna: Using LLMs to Uncover Memorization of LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04801","snapshot_observed_at":"2026-08-10T23:40:18.856384Z","title":", author Mahmoud, O","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.856384Z"},"links":{"cited_paper":"/paper/2403.04801","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:0556ad2938442439bd8fb083af830192e25fef363a6fc002d576ca5e66ce4282","observation_id":"fc0b7669-97f2-4286-b7df-addabbcfd847","resolution":{"observed_at":"2026-08-10T23:40:18.856384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01881","last_updated":"2023-07-04T18:53:47Z","snapshot_observed_at":"2026-08-11T03:07:31.772611Z","submitted_at":"2023-07-04T18:53:47Z","title":"ProPILE: Probing Privacy Leakage in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01881","snapshot_observed_at":"2026-08-10T23:40:18.859847Z","title":", author Yun, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.859847Z"},"links":{"cited_paper":"/paper/2307.01881","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:c75b4459d933fbeebbe698b322eacafb325aea0919aa54e34716a782161e64da","observation_id":"b24ae9a6-a797-4dc5-972e-4da17757e871","resolution":{"observed_at":"2026-08-10T23:40:18.859847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-07-06T16:15:00.517258Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-10T23:40:18.863343Z","title":", author Agarwal, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.863343Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f25aa17ef82d7a4472e96dc021d3a818a7f42f7bbad5f1f9ea91a79cafbbd5df","observation_id":"b1d2ffc2-ae93-4667-bcc7-2d7e1f5abd91","resolution":{"observed_at":"2026-08-10T23:40:18.863343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.866851Z","title":", author Mohan, C.K","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.866851Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:906d37c205d45a38bb2c231a8f017b234919aa800a0507cd2b8b6cef4cb51bd3","observation_id":"8031f3da-587d-4b80-9b4d-3868a96c84e2","resolution":{"observed_at":"2026-08-10T23:40:18.866851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.870152Z","title":", year 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.870152Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:5ea6d4589b19ed3cb8d0345b78ba12bb9be58de91e1d718ebdfebfda6fea0728","observation_id":"e316d26c-b291-4bcb-b894-5730f078520c","resolution":{"observed_at":"2026-08-10T23:40:18.870152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-10T23:40:18.873300Z","title":", author Goodfellow, I","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.873300Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e682e388f84d0543d2c198618f891692a9614a9a5ee6e4d7117ad081844a8340","observation_id":"0b35db98-10f5-4da9-b167-7d6129c37a14","resolution":{"observed_at":"2026-08-10T23:40:18.873300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-10T23:40:18.876912Z","title":", author Tiwari, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.876912Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:5a936c43aee552ab30276badfd8ed83268388797254f5509c42f1eec3a51354d","observation_id":"6172f59d-8acd-457e-819a-781f6d2a8980","resolution":{"observed_at":"2026-08-10T23:40:18.876912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-08-11T03:08:48.234367Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-10T23:40:18.880696Z","title":", author Guo, D","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.880696Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:6e567073cd7a20b824f5c17cb55faa3290efc22d0d1978f304b0340081f15ccb","observation_id":"897a4fa3-f174-450e-81e2-c7ee2f4b9600","resolution":{"observed_at":"2026-08-10T23:40:18.880696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.884172Z","title":", author Ma, R","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.884172Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:7c8bb325a88ccbc5d5e79e67d748ae60af798abcb14c97097fc3bb18493818e9","observation_id":"edf6d45c-388a-4588-9f95-f13e89e0706e","resolution":{"observed_at":"2026-08-10T23:40:18.884172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.887395Z","title":", author Xue, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.887395Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:f4ccf13eee70a63ec9d0e8c9cc0284b7f81b01eb95c0424f926518232ff5365a","observation_id":"19e3eda7-2088-46a3-a9b0-766a2bebc135","resolution":{"observed_at":"2026-08-10T23:40:18.887395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-08-11T03:09:40.549869Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-10T23:40:18.890566Z","title":", author Wang, R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.890566Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:9306461f136c83c6afe87fd3e7549baf28751d706d267ec9535c11275208f33e","observation_id":"27dfe993-1704-4c34-b01a-3ff8c08294e1","resolution":{"observed_at":"2026-08-10T23:40:18.890566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.12798","last_updated":"2025-05-19T04:34:50Z","snapshot_observed_at":"2026-08-11T03:10:26.921370Z","submitted_at":"2024-08-23T02:21:21Z","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.12798","snapshot_observed_at":"2026-08-10T23:40:18.894906Z","title":", author Huang, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.894906Z"},"links":{"cited_paper":"/paper/2408.12798","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e6ec0ab25604221256118e80ab5468bc7c3b3111d9bc6f1cbd86caed043a7817","observation_id":"718937eb-9807-4cec-aaf6-850a2a83479a","resolution":{"observed_at":"2026-08-10T23:40:18.894906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-11T03:07:31.817607Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-10T23:40:18.898803Z","title":", author Zhai, T","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.898803Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:9849645a32ec628ebc19cd8b92f0e2e39ad8788f50a97b0bab2a547d9a80942d","observation_id":"67d21510-4af1-4e4d-b148-2da5ae8f0890","resolution":{"observed_at":"2026-08-10T23:40:18.898803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.13985","last_updated":"2024-09-08T07:44:45Z","snapshot_observed_at":"2026-08-11T15:55:03.858488Z","submitted_at":"2024-08-26T02:35:37Z","title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models","version":3},"cited_work":{"arxiv_id":"2408.13985","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.13985","snapshot_observed_at":"2026-08-10T23:40:20.399315Z","title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models","venue":"cs.CL","work_id":"687d9b34-8ac9-413c-a999-2752537525d5","year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.902560Z"},"links":{"cited_paper":"/paper/2408.13985","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e8b1bdbb7234a19b5a747780b7a3d6703ab829ed9d6a614324ea7870bf560a69","observation_id":"ed7036de-ae3a-4ce6-8128-a2c0a3a140f5","resolution":{"observed_at":"2026-08-10T23:40:20.403205Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.906248Z","title":", author Shi, C","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.906248Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:92db436de8def93c296349b69b02edc993a8d3fb52a43a08ab50933b8348deac","observation_id":"3d040eb5-57ac-420f-8de7-d075e855c493","resolution":{"observed_at":"2026-08-10T23:40:18.906248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00240","last_updated":"2024-06-01T00:11:09Z","snapshot_observed_at":"2026-08-11T12:44:11.012766Z","submitted_at":"2024-06-01T00:11:09Z","title":"Exploring Vulnerabilities and Protections in Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00240","snapshot_observed_at":"2026-08-10T23:40:18.909862Z","title":", author Hu, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.909862Z"},"links":{"cited_paper":"/paper/2406.00240","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:67aadc2421a1665b6622aee7bc4f15277131a8d7b03e1dc9c8606221e39476b3","observation_id":"2b30b9ad-49f6-420e-9d19-c4dd844e61ab","resolution":{"observed_at":"2026-08-10T23:40:18.909862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.913451Z","title":", author Jia, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.913451Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:4c838389b4b76d56775c02d372e916ebd066f97760f45cb04ad201f025e07c02","observation_id":"683b798a-ac00-4d1d-ae37-753547f53b83","resolution":{"observed_at":"2026-08-10T23:40:18.913451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.10712","last_updated":"2020-10-21T02:13:26Z","snapshot_observed_at":"2026-08-05T00:20:37.478632Z","submitted_at":"2020-10-21T02:13:26Z","title":"Boosting Gradient for White-Box Adversarial Attacks","version":1},"cited_work":{"arxiv_id":"2010.10712","doi":null,"metadata_source":"pith","pith_arxiv_id":"2010.10712","snapshot_observed_at":"2026-08-10T23:40:20.292039Z","title":"Boosting Gradient for White-Box Adversarial Attacks","venue":"cs.LG","work_id":"fc1b1b3c-5f88-458c-b8aa-d66957c291ba","year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.917039Z"},"links":{"cited_paper":"/paper/2010.10712","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:bf5d9f81da42b176b073841f7db0f675c5db4c2d865f013ab2b50a7c33a824af","observation_id":"b7121946-b6ef-4373-9fe0-e8f2fdb40a3d","resolution":{"observed_at":"2026-08-10T23:40:20.296171Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-10T23:40:18.920701Z","title":", author Yu, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.920701Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:5119d2ab2e2d1e3d090e3c91d6ca1239ec60d45a5664bf947e56c62ef95e9534","observation_id":"c2a5c351-c166-4b74-a897-bcce57595327","resolution":{"observed_at":"2026-08-10T23:40:18.920701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-07-06T05:17:56.287788Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-10T23:40:18.924328Z","title":", author Chen, X","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.924328Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:6a3ed1333b5987a1eafbbd493f206d353678f683ea042b2a625818005c66b7bb","observation_id":"2da4cd04-7c88-41c6-a3b5-c2a5c5873a7c","resolution":{"observed_at":"2026-08-10T23:40:18.924328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-10T23:40:18.928326Z","title":", author Deng, G","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.928326Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:98317e159a7ada2da6261c7d036f7fd8eeb3a3cd5515264aa6bf5ba771912db3","observation_id":"2bc4f214-b188-4331-99c3-c590eafac6e3","resolution":{"observed_at":"2026-08-10T23:40:18.928326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.931958Z","title":", author Jia, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.931958Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:bf54fa91b404ed3591fc54815640986d858bb4fb7ebdc795581f780197826534","observation_id":"ce7733dc-ceab-4b91-9d48-3fe34c291ae8","resolution":{"observed_at":"2026-08-10T23:40:18.931958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.935196Z","title":", author Jia, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.935196Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:0b6c38944dcb656277ab8ae5f50b6a699d421526e1b9447264a663b678b71f5f","observation_id":"19cff4e7-b86b-43e6-bf14-224fc7f1a715","resolution":{"observed_at":"2026-08-10T23:40:18.935196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.938581Z","title":", author Jia, Y","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.938581Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:b3181567f15ff04251297878183d67e167de35c35e103ff4d3e2d377c61cc7b4","observation_id":"29c75329-0fdd-41b9-ada1-fb05190c464e","resolution":{"observed_at":"2026-08-10T23:40:18.938581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.941944Z","title":", author Mondal, A","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.941944Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:46a058a92f225956538c96ce7928a53048f29463a49275739c98af4c913dff80","observation_id":"d8ac168e-e14c-4f8c-95f1-c525466d46a1","resolution":{"observed_at":"2026-08-10T23:40:18.941944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.00539","last_updated":"2023-04-23T22:20:47Z","snapshot_observed_at":"2026-08-11T13:17:41.103377Z","submitted_at":"2023-02-01T16:04:48Z","title":"Analyzing Leakage of Personally Identifiable Information in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.00539","snapshot_observed_at":"2026-08-10T23:40:18.944927Z","title":", author Salem, A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.944927Z"},"links":{"cited_paper":"/paper/2302.00539","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:ced5caed877369add39522530bd135713c22368a31a887e0502b6e002894b018","observation_id":"942d9250-36d1-4d78-b5a6-8b72d81a3dea","resolution":{"observed_at":"2026-08-10T23:40:18.944927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.949043Z","title":", author Li, W.J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.949043Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:50ab447202ead83f3b40a290f3e4ecf8245173c6bf18a90a4588ba7e542d8cf5","observation_id":"67145140-da1c-4493-a477-07bb6839830b","resolution":{"observed_at":"2026-08-10T23:40:18.949043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.18462","last_updated":"2023-08-07T06:32:56Z","snapshot_observed_at":"2026-08-11T03:09:08.753040Z","submitted_at":"2023-05-29T07:06:03Z","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.18462","snapshot_observed_at":"2026-08-10T23:40:18.952415Z","title":", author Mireshghallah, F","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.952415Z"},"links":{"cited_paper":"/paper/2305.18462","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:6a1b4b5d334ba741445dee73284e486cf21ab4b11b59eb489a9c127a05f102b6","observation_id":"71a346b9-e3b9-43b7-83e5-e27a7376d0ea","resolution":{"observed_at":"2026-08-10T23:40:18.952415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.955689Z","title":", author Steve, L","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.955689Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:4da18659949c89cd551cb41e9fd8b3d2193c12808de90b9d8bf9946a71a97fe0","observation_id":"233bee87-905b-4e7b-88e7-2402e70b43ee","resolution":{"observed_at":"2026-08-10T23:40:18.955689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.958733Z","title":", year 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.958733Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e823758ff3839599a6a83a89a3184c61c5dcee64b3a10c241996dd219023f254","observation_id":"eb16f093-f602-4130-a882-2799ea48da76","resolution":{"observed_at":"2026-08-10T23:40:18.958733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.961710Z","title":", author Wang, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.961710Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:257e170d6680366074c1301686581b0d98c2c33d2c5b9dc1158ad40a40e84685","observation_id":"92f7400e-7854-4cce-b05a-087f593435f2","resolution":{"observed_at":"2026-08-10T23:40:18.961710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.02943","last_updated":"2025-08-23T08:46:24Z","snapshot_observed_at":"2026-08-11T03:07:31.277638Z","submitted_at":"2024-07-03T09:20:04Z","title":"PII-Compass: Guiding LLM training data extraction prompts towards the target PII via grounding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.02943","snapshot_observed_at":"2026-08-10T23:40:18.965335Z","title":", author Frikha, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.965335Z"},"links":{"cited_paper":"/paper/2407.02943","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:4d87c22c9806a24c24e3b4df6aff6ea6f2f2f902f8833d2ff22997f94224e899","observation_id":"4373f005-c79d-4288-a495-eb3de3de662a","resolution":{"observed_at":"2026-08-10T23:40:18.965335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-10T23:40:18.968749Z","title":", author Carlini, N","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.968749Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:e4d7c973251e9e09a2f1075b2931448d1c282b0e1ce3082ba9edead69a27b48f","observation_id":"a5158f09-dcc4-4a7b-9e70-c02f04be938c","resolution":{"observed_at":"2026-08-10T23:40:18.968749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2405.20015","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:20.044556Z","title":", author Sun, Y","venue":null,"work_id":"f72dd18b-c028-4fc1-b93e-bfa2f2b6be16","year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.972053Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:fc73c3f6a0d365980d74a7c0f045452a0cec6391a928fbee2108d15a37af2c88","observation_id":"f2021cd5-baf3-4395-99e2-64ae2e8cd5df","resolution":{"observed_at":"2026-08-10T23:40:20.050402Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.975267Z","title":"title H ello G P T -4o","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.975267Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:498349f6eb0f4a39197499f387d9689827c47b043fd727073fb3e8efe48e2e96","observation_id":"6e75aa94-4981-46bd-bb86-1df184d3ea97","resolution":{"observed_at":"2026-08-10T23:40:18.975267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.978234Z","title":", author Vassilev, A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.978234Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:a777bec7bb7ecc173294b9f1adc3028cbaacea495fd20312d2f9387d43b83891","observation_id":"7b66e0a8-a6c1-4cbc-a50f-7564b9d075d4","resolution":{"observed_at":"2026-08-10T23:40:18.978234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.981225Z","title":"title O W A S P T op 10 for L arge L anguage M odel A pplications | O W A S P F oundation --- owasp.org","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.981225Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:3806f470154df3718535df4f975b005074d88f2cfb82fd737db7c578c9467a53","observation_id":"05f19177-8b6d-4fbc-a061-00f08efe4a18","resolution":{"observed_at":"2026-08-10T23:40:18.981225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:40:18.984401Z","title":", author McDaniel, P","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.984401Z"},"links":{"citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:bf2c9686a707398113c6e9e0768260cba188b0dd8e9ee4250595d68693614b2e","observation_id":"06b98651-c07e-4288-95b3-ed179da631b4","resolution":{"observed_at":"2026-08-10T23:40:18.984401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15236","last_updated":"2026-05-27T16:38:46Z","snapshot_observed_at":"2026-07-06T19:36:32.581033Z","submitted_at":"2024-10-20T00:00:56Z","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15236","snapshot_observed_at":"2026-08-10T23:40:18.987383Z","title":", author Bi, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":101,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.987383Z"},"links":{"cited_paper":"/paper/2410.15236","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:ac01134e8871739a7ceaa94975d3082f7ce5aaa316507415245b6482a4072ada","observation_id":"3ff3eb2f-0da3-447d-848b-9e1c7bcc26fe","resolution":{"observed_at":"2026-08-10T23:40:18.987383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-10T23:40:18.992038Z","title":", author Ribeiro, I","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":102,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.992038Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:ae3554fbbc027eef5441f4df6faf29e0297c863208b3d5f2e0a20783967d69f3","observation_id":"4f6d86b8-3a4a-4cc4-8197-8f5a7532d86e","resolution":{"observed_at":"2026-08-10T23:40:18.992038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":96,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":165},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 100 of 165 outbound references and 1 inbound Pith citation observation for arXiv:2412.20087."}