{"as_of":"2026-08-11T14:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:220c0f05fb3f82fa5519e9881e236bbd617de6edb8333e928f446fa69b250c21","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-21T03:41:35.581523Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:16:23.187009Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.21392","snapshot_observed_at":"2026-08-04T01:16:23.187009Z","title":"VIPER- MCP: Detecting and exploiting taint-style vulnerabilities in MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.187009Z"},"links":{"cited_paper":"/paper/2605.21392","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:04b0ad9e3391e4f9257830e2becee2935611853bf3a2ed8f57386edf3da4947d","observation_id":"f9a8732b-42dd-41fb-9475-40a7c3d6da33","resolution":{"observed_at":"2026-08-04T01:16:23.187009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.21392/citation-record","integrity":"/paper/2605.21392/integrity","json":"/paper/2605.21392/citation-record.json","paper":"/paper/2605.21392"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model context protocol specification","venue":null,"work_id":"7c068214-eb0a-4f09-8f5e-637bc254fa8f","year":2024},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:f16433e1ea7a389e0066dd61edb118f915d48d073143d336047349d2cca86c18","observation_id":"5831549a-3d49-4e97-8b62-eb78ec6b84a6","resolution":{"observed_at":"2026-05-21T03:44:30.709589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"LangChain MCP adapters","venue":null,"work_id":"05f8dcaa-ec18-4bee-85a5-8b50dfcbb58a","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:1f4551cfd39fc6bf23c70e5075bc58279b41c9b6584ca8425ac8d5dc514d9d7e","observation_id":"5e314dbe-7792-4a84-ad0e-f689680f787d","resolution":{"observed_at":"2026-05-21T03:44:30.751266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MCP servers as tools in CrewAI","venue":null,"work_id":"d18a7828-9f82-4f23-9893-f5261fc55002","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:0cee71b753c91f8f451c62fb366b105718d89ad8ddd133631367187a57e3d230","observation_id":"c7674a00-064c-4ac6-bbfd-b6d217cb23f9","resolution":{"observed_at":"2026-05-21T03:44:30.749592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"AutoGen MCP tools extension (autogen ext.tools.mcp)","venue":null,"work_id":"66be7b6a-4d8e-412f-9c75-ea167078f7be","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:27943c7ca207cbde420050d0c0dea76eaea09b8a2f726740dca24edeafaf740c","observation_id":"75c00871-e5a7-4e05-a52c-b486f9c9ec3a","resolution":{"observed_at":"2026-05-21T03:44:30.723247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Smithery: The largest open marketplace of MCP servers","venue":null,"work_id":"c86162ac-3e90-400d-a967-e4fe3bf3e03f","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:d09213da13fe03b708b5472ad2de1e2da542afe5b442e39290234fe1370ecf4e","observation_id":"676046e7-c324-42ab-8c9b-55c068d2f76b","resolution":{"observed_at":"2026-05-21T03:44:30.733028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Glama: The MCP server registry, inspector & gateway","venue":null,"work_id":"1d88e0d5-2aa6-44ed-9ff3-762672a63b71","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:9ba38c219bfec7bbd8131c2e21e4cf9f0be0c0472aeb112890f2af5150d21062","observation_id":"a7f34955-f9cf-442f-832b-5c4fc6e1e3a6","resolution":{"observed_at":"2026-05-21T03:44:30.702602Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"PulseMCP: MCP server directory","venue":null,"work_id":"47c41b1a-b68b-4230-8afa-c167a965dd81","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:6d31c6fbf6c5fae9cd1690b3e0b4d88046e543b8d30f516e8c9c1bb5a4bb7d62","observation_id":"f9bddd10-7005-4ac6-8081-7e92dcf752ee","resolution":{"observed_at":"2026-05-21T03:44:30.740443Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.25292","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T10:46:52.256497Z","title":"A measurement study of model context protocol ecosystem","venue":null,"work_id":"7f64dbec-0608-4fc6-9535-59eec11545d5","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:4d296852235a94ca8e4929ceae0a3e6e2288c086c84b577a810b06c4861659c4","observation_id":"5bfc50ca-f592-4eee-82e7-eec36fb44206","resolution":{"observed_at":"2026-05-21T03:43:56.325510Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.10194","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mcp-in-sos: Risk assessment framework for open-source mcp servers","venue":null,"work_id":"786aa0c6-d3c2-44ba-97b0-612e9c7c323f","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:c37e69ababeb6a5948f7801f9849cf3f79d2c159be8b93c055a4dd2f8836c480","observation_id":"441dcdbd-ceff-445d-a5c1-a00de4098050","resolution":{"observed_at":"2026-05-21T03:43:56.322945Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software","venue":null,"work_id":"82b4acd6-9497-4c1d-918b-db84a302d950","year":2005},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:0e21c8cebdd1251945b3daaa6e0403618fd382af222933e8d013dac32aaf2c72","observation_id":"f033f8d1-3ac7-426e-80b3-c397d3cd0a32","resolution":{"observed_at":"2026-05-21T03:44:30.731193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ZIPPER: Static taint analysis for PHP applications with inter-procedural control-flow sensitivity","venue":null,"work_id":"1b6264ff-f6ad-4956-bb22-7a884ef26a1c","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:74f6f938a21aefd8db099767189f1adb820b6385c0d333e2e7e3ce404ab4bb25","observation_id":"7ba8da08-35a2-4c01-8b39-0974eaf9dac0","resolution":{"observed_at":"2026-05-21T03:44:30.715544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":"2503.23278","doi":"10.48550/arxiv.2503.23278","metadata_source":"pith","pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-07-11T02:47:49.588216Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","venue":"cs.CR","work_id":"3eff6b57-ab58-474f-afd9-4e115a5818a9","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:20c166866ef8e3426f2885c7760ddea864f1d3e16563113edc84a65e4f5dc10c","observation_id":"0e5bc8e5-ee66-4736-8996-4f37f0c9466e","resolution":{"observed_at":"2026-05-21T03:43:56.336948Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-09T15:33:11.934104Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":"2504.03767","doi":"10.48550/arxiv.2504.03767","metadata_source":"pith","pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits","venue":"cs.CR","work_id":"d5c42cc2-8444-459f-bcc5-f36d34de7a47","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:cb9efa1a352123d1721ffaf96c0fc7271562e60d9bd87b19d5bac9bfe2cf503e","observation_id":"31f67447-cbac-46a9-8017-e41c7cb1dcda","resolution":{"observed_at":"2026-05-21T03:43:56.333990Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":"2504.19793","doi":"10.48550/arxiv.2504.19793","metadata_source":"pith","pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","venue":"cs.CR","work_id":"0224da95-0f8f-4479-bb4e-602bec01d31c","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:b2bf68d7228303c8cef9fe9ebbaf5285b813dd4f4e73dfa65719bb6a1636bef4","observation_id":"fb2e3539-7725-4b7f-9d77-68bb65e42435","resolution":{"observed_at":"2026-05-21T03:43:56.317309Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Make agent defeat agent: Automatic detection of Taint-Style vulnerabilities in LLM-based agents","venue":null,"work_id":"13dfb268-89b8-48fd-82c0-053ee33ea379","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:4f12cd86672bbe1e375face974e1e87e212f7132507cf45bf5934365882634f4","observation_id":"e2e85fb3-bc5e-45f5-80ff-f082f9ec7b4e","resolution":{"observed_at":"2026-05-21T03:44:30.738822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bytebot: Open-source computer-use agent","venue":null,"work_id":"265baa94-16e3-4ffc-a552-ca27c57d4cfb","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:c1d3d34e55ae3e06fb01f0a8622072d1799bc29c2565b8aa7fed40b253a19294","observation_id":"71876128-c44a-4e1a-acc7-2d7ec9d5cdc9","resolution":{"observed_at":"2026-05-21T03:44:30.719431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.03580","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.125563Z","title":"Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions","venue":null,"work_id":"c231d6ea-d803-48e3-b274-3663b7e97f52","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:8cdaa972b0b215719f5495393ab8f378d07c4554b379d6db7a42a5a2e7b63292","observation_id":"410b7bac-2315-4fb4-b8d4-4171a5ec472c","resolution":{"observed_at":"2026-05-21T03:43:56.317913Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Auditing mcp servers for over-privileged tool capabilities","venue":null,"work_id":"31649a54-77ea-4b9c-9efc-ae2057fea9a2","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:9a1db57932ad97e9757211710c02582962e0b63808f701f813eb5e614bb8ab1f","observation_id":"cbaa11b7-e85d-4865-966c-98bb008e43db","resolution":{"observed_at":"2026-05-21T03:44:30.726981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing the AI agent supply chain with Cisco’s open-source MCP scanner","venue":null,"work_id":"f1f16c82-2a03-469b-bfe1-2f0b2d03fa4b","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:406bd12a32ce3d8da4431dc42a90dacc7410cba96aa622d45d987d4c16283983","observation_id":"0029f5a1-bd25-429b-8554-896624e5a888","resolution":{"observed_at":"2026-05-21T03:44:30.711502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"3956.313402","doi":"10.1145/3133956.3134020","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Directed greybox fuzzing","venue":null,"work_id":"26a22e63-a8a5-4a39-8d11-c5796eb2ad29","year":2017},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:b7016a677d13d9d0fd2f16f8eaf690efd31936a2d38cd6ae9712e4b503f0f561","observation_id":"b2ac026b-d73c-4c02-8956-efe2ec9865dc","resolution":{"observed_at":"2026-05-21T03:43:55.958867Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-21T03:52:13.066561+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-21T03:52:13.066561+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model context protocol (mcp) at first glance: Studying the security and maintainability of mcp servers","venue":null,"work_id":"56dc1f5e-4919-4d57-bd68-1a032b361d67","year":null},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:f35be43ead0b4e6587584ab6eb2b8febdd62434337ef38f2b1fd7f429f3fb518","observation_id":"21e18b3d-fb08-4331-8cb7-b33ba7579353","resolution":{"observed_at":"2026-05-21T03:44:30.734991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":"2506.13538","doi":"10.48550/arxiv.2506.13538","metadata_source":"pith","pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-07-11T02:47:50.715137Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","venue":"cs.SE","work_id":"c7825b29-3cba-435a-a713-36c73899e542","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:64bffbd8cf8eb943f02de859d012ce23bfff4e74718a53ca03bb5cbc8b2d3649","observation_id":"2842b453-01e6-4aa8-8798-160c05f40673","resolution":{"observed_at":"2026-05-21T03:43:56.330732Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hawkeye: Towards a desired directed grey- box fuzzer","venue":null,"work_id":"f7e48361-aa90-4b66-bcf8-8a2d9f1b7103","year":2018},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:7dde218bacabcabae8cc17598c0a58022921272da68d326715f9bfe561ae8cf2","observation_id":"e2a01603-eb1d-48c3-94e1-cb91473b2172","resolution":{"observed_at":"2026-05-21T03:44:30.717516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey of taint analysis for software security","venue":null,"work_id":"7686fc81-0048-46c2-9a01-dd2ac7295444","year":2024},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:50db747eb41c500b0a1306dde80bec94ddae00c16dcccccbdf4903e098700035","observation_id":"2b4862d4-d66b-4332-b5e2-817abce380f8","resolution":{"observed_at":"2026-05-21T03:44:30.700844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"TAJ: Effective taint analysis of web applications","venue":null,"work_id":"17a93b8c-d29b-489d-a3b7-3d5c1586fc6d","year":2008},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:61fdc9fa408a9db204f36b219cd265178fdfddd9f8d4448f2bd68ec28989a14c","observation_id":"9ad7fc6f-aa60-49d9-85a9-5e9f0d927047","resolution":{"observed_at":"2026-05-21T03:44:30.753032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"TRANSPARENT: Taint-style vulnerability detection in generic single page applications","venue":null,"work_id":"55568035-207d-410d-916b-809c15d40bde","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:30de92c5469bf424a9e8106dd0d97306fda2af6975d2fb6e37a7f376d94d56c2","observation_id":"04f984d3-78b8-44fa-991c-a0675158709a","resolution":{"observed_at":"2026-05-21T03:44:30.698795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"DTaint: Detecting the taint-style vulnerability in embedded device firmware","venue":null,"work_id":"22cf2748-d67e-4ab2-8604-fe1a32237eb5","year":2018},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:4387ece59b1e15060163418949fa42373078e346a8e7ab12d4da05903d27137a","observation_id":"e75575e3-acc3-453d-b2c5-0159b6525c27","resolution":{"observed_at":"2026-05-21T03:44:30.728805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"NodeMedic-FINE: Automatic detection and exploit synthesis for Node.js vulnerabilities","venue":null,"work_id":"97495a13-7103-432a-b5e2-ec1afff6eba3","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:539fdfe161c34fb2763a4df745159c6616a9022841408942fc893cfe8fc217d1","observation_id":"73b0d4f6-795c-4c4b-8647-6e8fb8ef0d26","resolution":{"observed_at":"2026-05-21T03:44:30.721390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.06764","last_updated":"2024-10-12T03:59:19Z","snapshot_observed_at":"2026-08-03T13:25:00.381388Z","submitted_at":"2024-08-13T09:41:53Z","title":"The Progenitor and Central Engine of short-duration GRB 201006A associated with a coherent radio flash","version":2},"cited_work":{"arxiv_id":"2408.06764","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.06764","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"PentestGPT: An LLM-empowered automatic penetration testing tool","venue":null,"work_id":"40d8fbbd-8555-44ce-88cd-003b73a6ef35","year":2024},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2408.06764","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:7fccbb449722e2ea233c76daeb9dc2233219bcd2e16ff213d49149f38fc910f1","observation_id":"f393b060-cf61-4282-ac6b-10fd4796a9e2","resolution":{"observed_at":"2026-05-21T03:43:56.331209Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Artemis: Toward accurate detection of server-side request forgeries through LLM-assisted inter-procedural path-sensitive taint analysis","venue":null,"work_id":"3a7c4541-360e-4d40-bd51-1d976ecb457c","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:c12adc33055833badb0415cf2924fda31d936ee182f9d1392a576be01d16a736","observation_id":"2b86f48f-8efd-4056-ac78-2f61722be5f1","resolution":{"observed_at":"2026-05-21T03:44:30.736945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"FirmAgent: Leveraging fuzzing to assist LLM agents with IoT firmware vulnerability discovery","venue":null,"work_id":"463fa614-2d42-4510-991b-408631865568","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:8af980889ffafd38935bd6c98dfe0ca37cec33190de8e364c1088e94d6c255f1","observation_id":"57e05b1c-b94f-4416-87be-2915c5afa5f5","resolution":{"observed_at":"2026-05-21T03:44:30.747814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.12614","doi":"10.48550/arxiv.2603.12614","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Chainfuzzer: Greybox fuzzing for workflow-level multi-tool vulnerabilities in llm agents","venue":"arXiv (Cornell University)","work_id":"3b03aa02-6523-48f2-9b1e-aebf6d7ba9f6","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:d5ffc7e1e917d1764bbf1f7eecccb43e83968dd809cd5a621369bc5c14063da4","observation_id":"21f39739-d3fe-4a65-999a-75fd834f7774","resolution":{"observed_at":"2026-05-21T03:43:56.339704Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Chain-of-thought prompting elicits reasoning in large language models","venue":null,"work_id":"6b059766-6c52-4022-83ff-1f825798bd90","year":2022},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:8db1ccb0a402ef81973f9bbc395d3c9e5521a4de744e33afd8849192d83059c8","observation_id":"1ee3c25b-2b4a-4568-9ce6-53312147580d","resolution":{"observed_at":"2026-05-21T03:44:30.745855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"National vulnerability database (NVD)","venue":null,"work_id":"a5e38a90-de58-4452-91ba-58098b279e72","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:e1acf04c16c059ea3cd6eaa3408cb897b3873f64f341f404d621dac04f236915","observation_id":"7eddd8e4-1ef1-4de8-80b6-6599e5be5906","resolution":{"observed_at":"2026-05-21T03:44:30.754749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"GitHub advisory database","venue":null,"work_id":"db7e889b-fed8-4442-a257-9b7a0b0bf954","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:a20656dd15a252e7386f3afad33d96cd6dbaf2f8178e027ffa4b7cbd79504136","observation_id":"1a30f805-a22f-427a-8d03-c0e61f70dbb9","resolution":{"observed_at":"2026-05-21T03:44:30.707885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-07T13:56:34.167869Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":"2406.12793","doi":"10.48550/arxiv.2406.12793","metadata_source":"pith","pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","venue":"cs.CL","work_id":"de9ce5af-0d8d-4b94-9793-64968d9bc06d","year":2024},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:ccfa334580d0bfd43191f40958ce2420a100ea79d2f7c093d3a351a357a0ec3e","observation_id":"ffcba53a-2586-4765-a146-e914b43b6714","resolution":{"observed_at":"2026-05-21T03:43:56.323996Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":"2407.21783","doi":"10.1016/s0749-0720(15","metadata_source":"pith","pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"The Llama 3 Herd of Models","venue":"cs.AI","work_id":"1549a635-88af-4ac1-acfe-51ae7bb53345","year":2024},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:ed84efd6cb12e742194fc54ad58f9c824de5ae031b76104a557602c974f172a8","observation_id":"645d0d4e-b97c-467a-b7af-dcf36047c2f1","resolution":{"observed_at":"2026-05-21T03:43:56.336807Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:e13faf165075b8b34e33ddb153a6c00e4d0b38978ca4d5fc49fd35e048f27793","observation_id":"c3eb0d98-41f6-49eb-9bab-02bed9745162","resolution":{"observed_at":"2026-05-21T03:43:56.305559Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing Claude Haiku 4.5","venue":null,"work_id":"c6abdf8e-c92a-40a9-be9c-e45a117c0fde","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:5df6142a0e87d902ba237ab404fa423492ced875faf4675a6fcf31910fc702f3","observation_id":"d21a6326-2418-45bb-9946-c7dd598836f9","resolution":{"observed_at":"2026-05-21T03:44:30.743969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing GPT-5.4 mini and nano","venue":null,"work_id":"ea8e3eed-db6b-42c1-9da1-6adbf9ae05ac","year":2026},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:35f2d6d5a71052eb9589d1f239db1003807ae290dd389a4b99bd612094e54a12","observation_id":"4fc381b0-c64c-457a-a2a9-1547933bc07d","resolution":{"observed_at":"2026-05-21T03:44:30.725016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00555","last_updated":"2025-06-05T03:20:54Z","snapshot_observed_at":"2026-08-07T17:37:05.037079Z","submitted_at":"2025-03-01T16:42:01Z","title":"Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable","version":2},"cited_work":{"arxiv_id":"2503.00555","doi":"10.48550/arxiv.2503.00555","metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00555","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Safety tax: Safety alignment makes your large reasoning models less reasonable","venue":"ArXiv.org","work_id":"b0e63685-280f-43d8-adf7-2603cb1c2798","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"cited_paper":"/paper/2503.00555","citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:aa9327a3d77448299cb49057aa9b2c9d4b0d82a24701dd3bcfefde5db1db48d7","observation_id":"bbdd557b-6449-429a-8306-8b561e17036c","resolution":{"observed_at":"2026-05-21T03:43:56.334255Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"metatrader-4-mcp: MCP MetaTrader 4 server","venue":null,"work_id":"feb26277-078e-4cd3-8f71-661d31195f54","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:d70202548582b373546c31fe40636bdb64c40f8ac914389d21d25c1e15e6e2b1","observation_id":"e319483f-b357-4d96-b144-8f61cbc347f8","resolution":{"observed_at":"2026-05-21T03:44:30.706228Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"docker-mcp: A powerful MCP server for Docker operations","venue":null,"work_id":"e488700b-a4b0-4be0-a398-f426712dd3e2","year":2025},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:59ea967edb90361c1002b1d54a9487378338fc81c22d765ab36444f70ce516f8","observation_id":"bb61ec16-63fa-4527-9813-e280022f288d","resolution":{"observed_at":"2026-05-21T03:44:30.704464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"60cab72f-5ca8-497f-98aa-5533fe38d945","year":null},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:0ee6421b8f3f10078396bcc1326387e8f1d37103e3a6753ca5224121be79493d","observation_id":"f3efb0c3-cd77-4a81-93d5-0cceca462021","resolution":{"observed_at":"2026-05-21T03:44:30.713295Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"trigger_stage","venue":null,"work_id":"278c3815-3cba-4946-badb-577ddc568350","year":null},"citing_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-21T03:41:35.581523Z"},"links":{"citing_paper":"/paper/2605.21392"},"observation_digest":"sha256:0aabb7891001cf51b3f9e379ebec3a1b13267ae1fefb3e69c606277292bf0167","observation_id":"ab644b5e-bbb5-4612-97c9-5d3a183f3e41","resolution":{"observed_at":"2026-05-21T03:44:30.742268Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":1,"verified_exact":13,"verified_fuzzy":29},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 1 inbound Pith citation observation for arXiv:2605.21392."}