{"as_of":"2026-08-19T01:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fbf036dffd2dd50e3e3c855c908f4c0014903dc376d53885013666a1c581dc5e","coverage":[{"denominator":18,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T04:56:25.081296Z","state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T14:21:42.687544Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-15T18:16:14.067578Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"cited_work":{"arxiv_id":"2509.05883","doi":"10.48550/arxiv.2509.05883","metadata_source":"pith","pith_arxiv_id":"2509.05883","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","venue":"cs.CR","work_id":"460fdce3-1104-48f5-abc4-f4bd90f3863f","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-17T21:29:55.123485Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":150,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.687544Z"},"links":{"cited_paper":"/paper/2509.05883","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6bfa6eaf93c854968cd6dc06aeb1cda53f6c6220a2cdde8f6fc0ae86ca347e64","observation_id":"69860096-2df0-4791-9e24-7714f4f176ee","resolution":{"observed_at":"2026-08-15T14:21:43.164358Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2509.05883/citation-record","integrity":"/paper/2509.05883/integrity","json":"/paper/2509.05883/citation-record.json","paper":"/paper/2509.05883"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.637066Z","title":"A novel system for strengthening security in large language models,","venue":null,"work_id":"f2382ee5-bcc0-4618-8e00-7cb50dfba76a","year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:24.979379Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:b1d8ae40c910dcc3def8239fab7370fcf7731244c3a623dce500808e1f672760","observation_id":"021c3624-6ddc-4205-9978-11efa5b050de","resolution":{"observed_at":"2026-08-05T04:56:25.645090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:24.983039Z","title":"System Prompt Poisoning: Per- sistent Attacks on Large Language Models Beyond User Injection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:24.983039Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:cfdb9faa06c88dd405ba432e6ebe8ebd3ad8bd8988c89bd9e29bd8b6a1e5aeb8","observation_id":"a35ce5c2-ac87-4d6c-8749-8ec85a4dc0c4","resolution":{"observed_at":"2026-08-05T04:56:24.983039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T04:56:24.995208Z","title":"Prompt Injection Attack against LLM-integrated Applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:24.995208Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:076f2215567a916e9fdcf56163e38232aa4d1a4c3350ed123f343472f3496ead","observation_id":"9ac67f20-25c4-4545-b610-39e291267631","resolution":{"observed_at":"2026-08-05T04:56:24.995208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-05T04:56:25.012214Z","title":"Prompt Infection: LLM-to- LLM Prompt Injection within Multi-Agent Systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.012214Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:c3ca8d1631e8ef2449c445235486ae6e22b3225bc74e463d63137360bed4a678","observation_id":"08698c30-d76a-404a-bd0a-4f6affba6a45","resolution":{"observed_at":"2026-08-05T04:56:25.012214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12439","last_updated":"2023-12-18T13:20:46Z","snapshot_observed_at":"2026-08-16T21:07:01.329694Z","submitted_at":"2023-10-19T03:25:28Z","title":"PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models","version":2},"cited_work":{"arxiv_id":"2310.12439","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.12439","snapshot_observed_at":"2026-08-05T04:56:25.188375Z","title":"PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models","venue":"cs.CL","work_id":"3beb5c0c-8540-4120-83b3-62306f10de3e","year":2023},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.020711Z"},"links":{"cited_paper":"/paper/2310.12439","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:f1c2305240cac6de9f0f8ec17ad16fad629597102ee66f36f0ee5b744db9f3c5","observation_id":"140df5bd-cf66-46a1-a094-06f328777c72","resolution":{"observed_at":"2026-08-05T04:56:25.195689Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-16T14:03:11.185956Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T04:56:25.024461Z","title":"Goal-guided Genera- tive Prompt Injection Attack on Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.024461Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:04e81550c683ad37138c5300607a5ce339d073f69c8d96ee9b6a5e69678cd5dc","observation_id":"320562d3-da33-4971-873a-9a2b35969801","resolution":{"observed_at":"2026-08-05T04:56:25.024461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.23308","last_updated":"2024-10-28T18:55:21Z","snapshot_observed_at":"2026-08-17T12:59:25.010802Z","submitted_at":"2024-10-28T18:55:21Z","title":"Systematically Analyzing Prompt Injection Vulnerabilities in Diverse LLM Architectures","version":1},"cited_work":{"arxiv_id":"2410.23308","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.23308","snapshot_observed_at":"2026-08-05T04:56:25.138778Z","title":"Systematically Analyzing Prompt Injection Vulnerabilities in Diverse LLM Architectures","venue":"cs.CR","work_id":"d7484903-f66f-44e3-ae56-11b1e8ae13e3","year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.029346Z"},"links":{"cited_paper":"/paper/2410.23308","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:a7f566c09d02ba69b5485f0b328c29e60b69181a7ac26ea5e481fc820b79358a","observation_id":"4f9248a0-795d-4888-b8a5-316d398ac9ef","resolution":{"observed_at":"2026-08-05T04:56:25.144199Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.624571Z","title":"Visual Prompt Injection Attacks in Modern Large Language Models,","venue":null,"work_id":"d9a2e406-06ed-423d-8894-4cd2e11c8706","year":1907},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.032460Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:fb809cb0b228f50df3476ccb3038693a842c62f1a0b4e813f4fbe70eb88a2ac9","observation_id":"156ceebf-f4a9-419d-bae5-490566a580dd","resolution":{"observed_at":"2026-08-05T04:56:25.630679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.604353Z","title":"Enhancing Se- curity in Large Language Models: A Comprehensive Review of Prompt Injection Attacks and Defenses,","venue":null,"work_id":"a1c09ac8-6dc6-43b0-9ba9-867c448fec1c","year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.042405Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:6a31c24adb1603ace72fc7d52313516cc2605434bb6bb7c07241f38b1cb5aac6","observation_id":"f0594368-e939-4ca7-af3f-aa44f51dab5e","resolution":{"observed_at":"2026-08-05T04:56:25.608889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.586725Z","title":"A Survey on Large Language Model Security and Privacy,","venue":null,"work_id":"6093ec58-64a7-48e0-9bc7-c04065830b92","year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.047222Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:4292ff05744754e85f7b869492e32f5446c0d3575c137a50300c8740a8662724","observation_id":"68ed8c8a-2986-4fa6-8660-8a55eea21f2d","resolution":{"observed_at":"2026-08-05T04:56:25.594034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.569092Z","title":"LLM01:2025 Prompt Injection,","venue":null,"work_id":"e1d72418-1ba5-487d-b7cf-c8dbc0dd04a8","year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.050988Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:88fac0bf6bdb70cb5d44dd6c4984b1c3dd124333f8e2693949c3e7132f0c130c","observation_id":"0852b5ac-dbb0-4938-8dd4-a5848b0a8729","resolution":{"observed_at":"2026-08-05T04:56:25.575229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.559342Z","title":"A Single Poisoned Document Could Leak ‘Secret’ Data via ChatGPT,","venue":null,"work_id":"aab91900-792d-4c90-b318-d707a5f2d053","year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.056183Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:c02603aa91795c9576fbb95b56485b83a630d196598183885a71df5ca96d3471","observation_id":"b95f095c-b5d2-4953-8222-50f6ab109f9a","resolution":{"observed_at":"2026-08-05T04:56:25.563032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.546669Z","title":"Hackers Hijacked Google’s Gemini AI With a Poisoned Calendar Invite,","venue":null,"work_id":"48cb4c92-d92d-4153-8b03-fdf95a49e469","year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.060054Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:fd538d177a2f1ceff71bf5f70651b0770021810956f2bf8c7fa343c6d91b533b","observation_id":"77ce5282-0626-4bb9-a3ca-a4562fe2abb0","resolution":{"observed_at":"2026-08-05T04:56:25.550066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.526318Z","title":"This Prompt Can Make an AI Chat- bot Identify and Extract Personal Details,","venue":null,"work_id":"2710e32e-5cb4-4174-beb8-4ca3f94ad795","year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.064794Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:63cad84376601324961e4eb015f8023361f65d986ea0f49b84e288dfe38c4397","observation_id":"bcbd4941-d0ea-4a20-a979-323773f2445c","resolution":{"observed_at":"2026-08-05T04:56:25.534529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.513832Z","title":"Here Come the AI Worms,","venue":null,"work_id":"dc7e270e-5164-4934-8d35-3920500a28d7","year":2023},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.068960Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:d0734cd2447ffcc2be3f7ada3b448acc60c2075b896099be1ac249979806d425","observation_id":"5aa00c8a-89ef-4a36-b70f-ba1c40eab002","resolution":{"observed_at":"2026-08-05T04:56:25.516900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.497439Z","title":"Cybersecurity execs face a new battle- front: AI vs AI,","venue":null,"work_id":"ee6ca8fe-2b09-4771-a3e9-96148bc45203","year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.071723Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:61a298c465f69746b388fc776979505fcfe3a1a8f7536e1b7b11ecccb792640c","observation_id":"c1763a5b-856e-409b-8c1b-99dea9b2e0f0","resolution":{"observed_at":"2026-08-05T04:56:25.507072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T04:56:25.485363Z","title":"Hackers ‘jailbreak’ powerful AI mod- els in global effort,","venue":null,"work_id":"fa6237c3-55c0-4a18-9aee-9c61790f3650","year":2023},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.074278Z"},"links":{"citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:13ab71f26a6b55f7283d63b6eb03655cea94b7db022b9be15f1ade7cd77819cf","observation_id":"e2c661f0-f44b-4c6a-b8f5-d75d15bfa09f","resolution":{"observed_at":"2026-08-05T04:56:25.489336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-16T21:05:28.382985Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15613","snapshot_observed_at":"2026-08-05T04:56:25.081296Z","title":"Contextual Ambi- guity in LLM Prompt Processing,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.081296Z"},"links":{"cited_paper":"/paper/2507.15613","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:c8c630ccd04276f2dfefbb289204b50455ad4be90f800904f69d79cf9cc95422","observation_id":"5c84f511-aad6-438f-8964-9d05c9e93977","resolution":{"observed_at":"2026-08-05T04:56:25.081296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T21:06:17.877999Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs"},"reference_resolution":{"displayed":18,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":2,"verified_fuzzy":11},"total_outbound_references":18},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 1 inbound Pith citation observation for arXiv:2509.05883."}