{"as_of":"2026-08-11T19:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cf9842e2aeef0a84f9c0dba6640e8b63bfb1229dd87d499114bcc0cb2041e04d","coverage":[{"denominator":74,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":74,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-09T10:22:23.782469Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.07461/citation-record","integrity":"/paper/2607.07461/integrity","json":"/paper/2607.07461/citation-record.json","paper":"/paper/2607.07461"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.364415Z","title":"https://cloud.google.com/blo g/products/ai-machine-learning/announcing -official-mcp-support-for-google-services ,","venue":null,"work_id":"ba39f94c-8bee-4bda-b1b5-c7b4aa105894","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:6419231e9ba8673548490674023ae9f35c773bdab27242eb460a4be9b57bfaa0","observation_id":"86f37c4f-1884-4e09-b220-754276836fd1","resolution":{"observed_at":"2026-07-09T10:26:11.365809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.291635Z","title":null,"venue":null,"work_id":"3751bc8b-2ce0-406e-9921-b729e34a11b8","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:6a740c33fa9ee12fb171851c1f5d5631e9ffe8f69d6236e0b0358bb43cf031f1","observation_id":"d5d45bef-e1a8-40dd-a484-3e88192450c9","resolution":{"observed_at":"2026-07-09T10:26:11.292714Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.286694Z","title":"https://modelcontextprotoc ol.io/, 2026","venue":null,"work_id":"a6232bc0-7c5d-4cce-9212-758b705f8b9c","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9ad514077d54236f6b2e42343bce34b415adcb2ce1d5dde988a1a325f313bad8","observation_id":"a641013b-596b-414e-8b75-5a1a2d12dacd","resolution":{"observed_at":"2026-07-09T10:26:11.287838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.288364Z","title":"https://developers.notion.com/gu ides/mcp/mcp, 2026","venue":null,"work_id":"a0f8c5e6-f928-4c53-9ab8-d34769097f86","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9b87c0ca6165cc90f534d7d217f462dec234b0283a242c5de9795e5668288bc0","observation_id":"75fb2810-f13a-4d3d-bc8c-f8cfef765e7a","resolution":{"observed_at":"2026-07-09T10:26:11.289598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.293332Z","title":"Introducing the model context protocol,","venue":null,"work_id":"3dd17bb5-498c-48e4-9234-dde2f60ab220","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a4bf79af14f4dfe773c082c534b0241919892b4f491e6196b97b85cd732bb93a","observation_id":"73cd9182-a013-4b35-98ec-280ded097c4e","resolution":{"observed_at":"2026-07-09T10:26:11.294533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.290111Z","title":"URL: https://www","venue":null,"work_id":"f886a353-15ef-4648-a555-2037deef4424","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:361913b401f00390ad11e0126ac4750092ee47636d0e0d858ba65a4bbf917d9b","observation_id":"7d789469-39e1-47a0-9a64-9dac2bea922f","resolution":{"observed_at":"2026-07-09T10:26:11.291120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.21236","last_updated":"2026-04-24T09:59:19Z","snapshot_observed_at":"2026-08-11T12:17:59.405004Z","submitted_at":"2025-10-24T08:10:36Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","version":3},"cited_work":{"arxiv_id":"2510.21236","doi":"10.48550/arxiv.2510.21236","metadata_source":"pith","pith_arxiv_id":"2510.21236","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","venue":"cs.CR","work_id":"73bf8253-c0ea-40a5-9420-8bcae2f5438f","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2510.21236","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:f54adc9aff32ebd1a96ba15915017de17b0d2dd5dea37a1daeda6bfff6865cb0","observation_id":"3a08c7c8-d3b7-4805-818e-fc299e5bcdae","resolution":{"observed_at":"2026-07-09T10:26:11.091011Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.348871Z","title":"Jail- breaking black box large language models in twenty queries","venue":null,"work_id":"79fd325d-07b1-416c-afc3-18c66f9b48cf","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:ec9dd38e334a2a889c450629b83e3e1dcfdd6e1d76aeb2db8db91bd09935bbbd","observation_id":"c2f12b9e-0562-4aa4-b787-5e3404fb5a81","resolution":{"observed_at":"2026-07-09T10:26:11.350082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.07575","last_updated":"2025-08-11T03:16:02Z","snapshot_observed_at":"2026-08-08T22:40:49.223476Z","submitted_at":"2025-08-11T03:16:02Z","title":"MCPToolBench++: A Large Scale AI Agent Model Context Protocol MCP Tool Use Benchmark","version":1},"cited_work":{"arxiv_id":"2508.07575","doi":"10.48550/arxiv.2508.07575","metadata_source":"pith","pith_arxiv_id":"2508.07575","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcptoolbench++: A large scale ai agent model context protocol mcp tool use benchmark","venue":"cs.AI","work_id":"795e1706-d2d2-4ab1-927d-732cf5a66047","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2508.07575","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:45a413da4d1c5dbb73793d2333b15cdcba603cd164642a14c2e0fbacadb2b44f","observation_id":"89ee4932-e0ad-4eab-831e-e61d49505e89","resolution":{"observed_at":"2026-07-09T10:26:11.138455Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.341617Z","title":"Operation mango: Scal- able discovery of {Taint-Style} vulnerabilities in binary firmware services","venue":null,"work_id":"a2746159-ac1e-4e04-a5a5-e99bee22081f","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:ac8bf0a1493c170170f85b4c150a0902518776b746b3d7e436c43f9cdc15fd69","observation_id":"0c7419c8-0ec8-444e-94a7-9ed978ec58ab","resolution":{"observed_at":"2026-07-09T10:26:11.342820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.338080Z","title":"Github rest api documentation, version 2022-11-28","venue":null,"work_id":"fb3ed0c2-6f77-49cd-b017-cd6431fec7ac","year":2022},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:4af0277e93542c14dd53d02150c61f0ccb067f5db31f6e292fe4c1a3b7dca806","observation_id":"075a5ae4-3710-46f6-9f41-ced4b259223a","resolution":{"observed_at":"2026-07-09T10:26:11.339312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.343349Z","title":"{PAPILLON}: Efficient and stealthy fuzz {Testing-Powered} jailbreaks for {LLMs}","venue":null,"work_id":"fd2f49e9-3306-4eba-99e4-943dcc68ada6","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:99ba6141570c85b96df3a10204f714c8a8e9df555cbe687ceee7b9a002388aba","observation_id":"4cfb941e-ec8f-4738-befa-474dda9ce44b","resolution":{"observed_at":"2026-07-09T10:26:11.344672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.328830Z","title":"A mea- surement study of model context protocol.arXiv e- prints, pages arXiv–2509, 2025","venue":null,"work_id":"f4d8c520-4b19-4192-bb95-482f99c92233","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:faa48aa233855b6c5b3b2d7a97b291f898eccca52885f4aebbd0e2636730b53e","observation_id":"ffb2b17a-f47e-4bb0-921d-ec836354d30f","resolution":{"observed_at":"2026-07-09T10:26:11.330149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-08-11T16:37:51.228728Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":"2506.13538","doi":"10.48550/arxiv.2506.13538","metadata_source":"pith","pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-07-11T02:47:50.715137Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","venue":"cs.SE","work_id":"c7825b29-3cba-435a-a713-36c73899e542","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a7ffa27bf7c7db7490acb0760db407826f727e257a2b0e15107a87b7380c6cb2","observation_id":"06864fc7-4354-4245-a7bb-5c6f82afa0b2","resolution":{"observed_at":"2026-07-09T10:26:11.108251Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.334279Z","title":"Vmud: Detecting recurring vulnerabili- ties with multiple fixing functions via function selection and semantic equivalent statement matching","venue":null,"work_id":"0a29a7c1-c4b7-43b8-b4a8-32fb60bddfb6","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:fe72926f50424b25e2e57eff65cbfc70e747768956fb3a3902507ee0f5e1e297","observation_id":"9f603c25-5019-40be-886a-f5dcbaf6ef4f","resolution":{"observed_at":"2026-07-09T10:26:11.335556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2309.00614","doi":"10.48550/arxiv.2309.00614","metadata_source":"pith","pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","venue":"cs.LG","work_id":"db5870ca-177b-4d1d-a08d-ee5ceab17fe3","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:7f57cc1f4bd420698f6a7b03cd570cfae052ca7bfe664612fb609818bd7bbfb7","observation_id":"df8c99ce-93e4-49fa-afd2-8dd1142c4d31","resolution":{"observed_at":"2026-07-09T10:26:11.105580Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:31.483658+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:31.483658+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:43b664d9def7a0a222fa84306135840e375814284ccfe9ef6417673cb3b4c8f0","observation_id":"a54c2a52-a9cd-497d-afa7-33e08bda3492","resolution":{"observed_at":"2026-07-09T10:26:11.110965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.362726Z","title":"Artprompt: Ascii art-based jailbreak attacks against aligned llms","venue":null,"work_id":"b7ca2f7e-a55a-4703-9bdf-640de595b267","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:b858dce1ab2ef3b387d2484787c3218f32deee12ffab6c9251f947bacef43a12","observation_id":"dff32abf-9b9c-4f1e-9608-f89d07010ccf","resolution":{"observed_at":"2026-07-09T10:26:11.363861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.307781Z","title":"Mcip: Protecting mcp safety via model contextual integrity protocol","venue":null,"work_id":"75a65b6c-0f68-4467-a744-98acfc54eae7","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5fba97730afb72c71851876cc41daf72956d4bd5a5dfffe9d11d6ad224175b6e","observation_id":"131859ff-39ca-439a-9563-a4448fb649ce","resolution":{"observed_at":"2026-07-09T10:26:11.309039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.359234Z","title":"PhD thesis, Massachusetts Institute of Technology, 2024","venue":null,"work_id":"60b83864-f522-4a47-ab20-5b29ab471a19","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e92196b962bbfbf2c0fdfc83170276c40954077762715def0558ffa5276f45ea","observation_id":"c982375e-af73-496c-bc96-ecab86413e48","resolution":{"observed_at":"2026-07-09T10:26:11.360396Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.357426Z","title":"Scaling javascript abstract interpretation to detect and exploit node","venue":null,"work_id":"65b3e061-ac92-4c43-816f-4cde68859e1d","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:98ca76d4dc1367caf77be47abed05c0dacff0f91674a0190da3c1fad8fb61ff5","observation_id":"844536b1-09bd-4708-bd08-fa34ad0e56c9","resolution":{"observed_at":"2026-07-09T10:26:11.358712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.355710Z","title":"Break the breakout: Reinventing lm defense against jailbreak attacks with self-refine","venue":null,"work_id":"f5ff60ae-8156-4d63-a922-1fc81b615d36","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5b4163b722634311c3d2e8301a4f954c15adbf83652bc35eae9d507c83550684","observation_id":"90de3d33-348c-410b-9840-3dcff0ee2a6d","resolution":{"observed_at":"2026-07-09T10:26:11.356904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-07-06T16:15:00.517258Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":"2309.02705","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-07-09T10:26:11.131634Z","title":"Certifying llm safety against adversar- ial prompting","venue":"cs.CL","work_id":"d19a91a9-d209-412c-b9b6-c7600e55ccf9","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a9ed54feec4f244140be2d49a6dc831ed6442074d2e14a2a329fe23e9c4cdd39","observation_id":"7fcce9d9-0859-4eb1-94ae-65d4e74112df","resolution":{"observed_at":"2026-07-09T10:26:11.133047Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e6d5d742e70e0b5ece19c341b3863f7da355db19843761b060cde65e564873a5","observation_id":"d3c27c3e-b0b9-4695-88e9-324a89886159","resolution":{"observed_at":"2026-07-09T10:26:11.140975Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.03580","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.125563Z","title":"Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions","venue":null,"work_id":"c231d6ea-d803-48e3-b274-3663b7e97f52","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9af83d2dac8711e7e64c710f5801fe02a072f659f18030fcc506da6655da4123","observation_id":"51bd7601-cec7-4c16-bbe0-59cb12db8c25","resolution":{"observed_at":"2026-07-09T10:26:11.127212Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23474","last_updated":"2025-06-30T02:37:27Z","snapshot_observed_at":"2026-08-09T18:44:17.312239Z","submitted_at":"2025-06-30T02:37:27Z","title":"A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis","version":1},"cited_work":{"arxiv_id":"2506.23474","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.23474","snapshot_observed_at":"2026-07-09T10:26:11.128632Z","title":"A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis","venue":"cs.CR","work_id":"b94e7f58-2bf4-4468-88bf-d95905b762c6","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2506.23474","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9bcbe5d21d1f029c100b5449cebb26eab3a65f03503a3c08a8c4de080c490f2f","observation_id":"8da03fe5-b62e-4cb6-8183-73a255208089","resolution":{"observed_at":"2026-07-09T10:26:11.130168Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.354012Z","title":"Detecting taint-style vulnerabilities in microservice- structured web applications","venue":null,"work_id":"09e4e2f5-958e-4754-94f1-93b74fecead7","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:f261e7010586512cfa120948232052f4f529eb14846c26b0539630b7d039ec33","observation_id":"89c3dcf4-ffd1-417b-a40f-6c8c5ae0646c","resolution":{"observed_at":"2026-07-09T10:26:11.355188Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.336088Z","title":"Make agent defeat agent: Au- tomatic detection of {Taint-Style} vulnerabilities in {LLM-based} agents","venue":null,"work_id":"b803010c-977c-489b-ba3f-d5006acfbf89","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:b4e85618f49d1e5e724384a7776130e1573ca2d364d4a6e3cbc144f1371a14c1","observation_id":"47fe5c76-8247-4739-b2f6-8666146b07e2","resolution":{"observed_at":"2026-07-09T10:26:11.337506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.339838Z","title":"Demystifying rce vulnerabilities in llm- integrated apps","venue":null,"work_id":"3f8a1801-a7a8-444f-876b-03aaca306815","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:0ad60b8d99a9914aa0689b42c20daba55b4cd03572077b3872edbcfee8375265","observation_id":"68b2a687-5108-4de5-aeae-f12dbe607ce1","resolution":{"observed_at":"2026-07-09T10:26:11.341072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2310.04451","doi":"10.48550/arxiv.2310.04451","metadata_source":"pith","pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","venue":"cs.CL","work_id":"3b676de6-edef-4976-a8b5-082d4ff50867","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:c5ad1deb590e34c8a69df5b2c28cb9bb63e1c5ee08bc758f2948e08262ae1bef","observation_id":"10c1243c-9f0d-4b93-9105-de4f7277c99d","resolution":{"observed_at":"2026-07-09T10:26:11.113478Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":"2305.13860","doi":"10.48550/arxiv.2305.13860","metadata_source":"pith","pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","venue":"cs.SE","work_id":"63e07f6a-433d-4bb2-ba7d-a8886e09211d","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:dca2f761c79e7277369b66b1f064f390ac6ce763d5a2deb52d98eb78e8dbf5fa","observation_id":"a4c609c3-9fbe-4a30-aca5-76cfa293053a","resolution":{"observed_at":"2026-07-09T10:26:11.116509Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:53:04.272267+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:53:04.272267+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.346964Z","title":"Tchecker: Precise static inter-procedural analysis for detecting taint-style vulnerabilities in php applications","venue":null,"work_id":"f9dd6ec7-ccb1-430a-9551-9f009fe9422c","year":2022},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a060718f72f63075f5af282ba2a4557c879119dd1e5cd2ebade9884cae4427a9","observation_id":"afc4bb3e-5998-433c-87ed-209bf101134a","resolution":{"observed_at":"2026-07-09T10:26:11.348281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.326960Z","title":"Tree of attacks: Jailbreaking black-box llms automatically.Advances in Neural Information Processing Systems, 37:61065–61105","venue":null,"work_id":"a14a2db1-5fa8-4d88-9f74-05318b83aca0","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:3af0ea87371c2abee2c1d90598bc6410f86f3a2473e650978fb1f9772dcc5226","observation_id":"c4949f0c-03c9-418b-a025-311e3d14a1fd","resolution":{"observed_at":"2026-07-09T10:26:11.328262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.330688Z","title":"When a patch goes bad: Exploring the properties of vulnerability-contributing commits","venue":null,"work_id":"52a15e91-0227-40ae-ab13-e1f2c9dfe541","year":2013},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a6af1d553ac7d40971c23490a032803544eb48c62eb4395d63a4eaa04b9ee64d","observation_id":"2c3dfce9-04a1-42ba-8f48-5bb74b19a45f","resolution":{"observed_at":"2026-07-09T10:26:11.331876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.325343Z","title":"Llama guard 4: Model card and prompt formats,","venue":null,"work_id":"c0e2fb7d-a161-4baf-9402-8c8491c922cf","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:6c12202ac9ccdf9ffdcc5fc69f10be575af7a71c1f699cf337e4e6fd6738cee6","observation_id":"2367be71-dafb-461b-b7a6-bfae44b2739f","resolution":{"observed_at":"2026-07-09T10:26:11.326441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.323734Z","title":null,"venue":null,"work_id":"b4463b6a-009b-457d-8406-95a322ac684a","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:a047877be523cfb3a88a93ebc4ca89beeaf3e8d5ddbf76f74d38aa55ba5cca56","observation_id":"b981fb98-3efe-43a9-bef2-8290edd27f75","resolution":{"observed_at":"2026-07-09T10:26:11.324801Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.322041Z","title":"Llama prompt guard: Model cards and prompt formats, 2025","venue":null,"work_id":"6ee283cb-e1c7-4fb5-bd17-eca0bc5e042d","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:2b899e5775b2535eaf380bd9106ae3940d6c34c93f04ae63a49a32422064de3d","observation_id":"ba526d9b-bce5-4d32-8c1d-c409da66c327","resolution":{"observed_at":"2026-07-09T10:26:11.323223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.332464Z","title":"MITRE ATT&CK: Adversarial Tactics, Techniques, and Common Knowledge","venue":null,"work_id":"ead6112e-206a-4599-8c0a-1eb19bbc9037","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:c56a19d4094afdbb9ebce227c56600ff85231841871475b34b8fd6b90ac1787f","observation_id":"071e67a4-4a53-4164-98ce-46244f864c5f","resolution":{"observed_at":"2026-07-09T10:26:11.333748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.345222Z","title":"Model context protocol python sdk","venue":null,"work_id":"247d0f92-9be2-434f-ae4e-e3c68e863947","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9f11e9ea1a9a8ea1015f9cdf05f2dada3cd78936e37e9c138b3e1a541d543dbd","observation_id":"695de742-49a5-42d4-93d9-e7786f2f51e0","resolution":{"observed_at":"2026-07-09T10:26:11.346416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.366471Z","title":"National vulnerability database (nvd)","venue":null,"work_id":"d112e1fe-1f3c-4bd9-8187-faed133a6345","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e511da3bb66e2d302157a5fa8c5362825a184cae8804b730c9a6fbbe706b25c2","observation_id":"0eaf3218-7fd5-4ea0-90a5-f4f4f38a7789","resolution":{"observed_at":"2026-07-09T10:26:11.367539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.309589Z","title":"Commit 0284aa8 for patching the cve- 2025-5276 vulnerability, 2026","venue":null,"work_id":"784a49fb-f7f5-49a2-a426-0c8171ad14df","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:ca2989dfa99aa6a5afeb8a541fa9caedf6d92ba97568e5dfddb1670b1f7831c1","observation_id":"ad98be59-7344-4fe1-840c-92b2efb58b7e","resolution":{"observed_at":"2026-07-09T10:26:11.311000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.311524Z","title":"Cve-2025-5276 detail, 2026","venue":null,"work_id":"12e21e03-9aab-48c7-867e-3a590f26e5bb","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:4c02df24c3ba4413f461c68690a666acfea08e99c3d0e22c6e0859a93b7e246a","observation_id":"d0ba8bff-aeba-4d94-98e4-f613c0e32b1f","resolution":{"observed_at":"2026-07-09T10:26:11.312627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.305973Z","title":"User comment of the commit 0284aa8 for patching the cve-2025-5276 vulnerability, 2026","venue":null,"work_id":"af10a87d-5f92-4e19-b7db-ce0549aee015","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5a117d5405da570640d1df9f26ffa65482cfa10d517123570c191dbf11fc0e40","observation_id":"ac61eb5a-b42c-472b-8618-da0af895e1b2","resolution":{"observed_at":"2026-07-09T10:26:11.307222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.304053Z","title":"The official website of GPT-4o","venue":null,"work_id":"b42a2826-e666-4247-95ff-cb92a0f8fbef","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:27fc817c4290f8476f4549d9eb30d77ce84f0e3ed8c04634a3957c1eb684b443","observation_id":"e52bc7ad-a364-46b2-9fcc-31a1a41d37ef","resolution":{"observed_at":"2026-07-09T10:26:11.305393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.352265Z","title":"Prompt-to-sql injections in llm-integrated web applications: Risks and defenses","venue":null,"work_id":"3cb1754a-2c75-4c53-8932-a2da1969e1c8","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:96a7b550542240d5ac69f755ab0234ce4cfe4b292dc52f4a6695c6321e998b84","observation_id":"0fe96147-08d8-4f22-be23-e2face468fcf","resolution":{"observed_at":"2026-07-09T10:26:11.353480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-10T17:53:09.843403Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":"2308.07308","doi":null,"metadata_source":"pith","pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-07-09T10:26:11.117762Z","title":"Phute, A","venue":"cs.CL","work_id":"f8592de5-f3aa-414c-8de9-728b14826831","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e2814ce05d3baeea380059a906ab5822c01b75f4f3390bb077d4a512d3f88d70","observation_id":"a7dfcbde-f276-42c0-8bab-8a0cc5a0ef85","resolution":{"observed_at":"2026-07-09T10:26:11.119011Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":"2310.03684","doi":"10.48550/arxiv.2310.03684","metadata_source":"pith","pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","venue":"cs.LG","work_id":"f670dc77-bf11-46fc-af9d-b77215abd084","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:67e1e29cd7fcc99be41e51dde3a5b6644055c87f31f498be32760317cdaeae00","observation_id":"20025c90-a9b7-42a7-a3f7-03b9dac8dba1","resolution":{"observed_at":"2026-07-09T10:26:11.121826Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.350641Z","title":"do anything now","venue":null,"work_id":"3e922d2d-2e87-44f6-9118-3816160d1626","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e75c10b7b9635d61c31dcf1306182624befd31d92e57f9a308d0a1282dcb573b","observation_id":"887d4b74-a026-4320-af9d-284df020920e","resolution":{"observed_at":"2026-07-09T10:26:11.351746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.360961Z","title":"Security debt in llm agent applications: A measurement study of vulnerabilities and mitigation trade-offs","venue":null,"work_id":"4ec81439-6103-4325-91eb-e60a87270727","year":null},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9c9099b3b6a80558f0aa30cf8a1162c6e4a763fcb2cceb70dfd8228f922faa17","observation_id":"55f074e0-e5d1-4b25-8844-cffc760c8ac6","resolution":{"observed_at":"2026-07-09T10:26:11.362208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02040","last_updated":"2025-09-14T07:48:51Z","snapshot_observed_at":"2026-08-07T13:11:17.932068Z","submitted_at":"2025-05-31T08:01:11Z","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","version":4},"cited_work":{"arxiv_id":"2506.02040","doi":"10.48550/arxiv.2506.02040","metadata_source":"pith","pith_arxiv_id":"2506.02040","snapshot_observed_at":"2026-07-11T02:47:51.130321Z","title":"Beyond the protocol: Unveiling attack vectors in the model context protocol ecosystem","venue":"cs.CR","work_id":"899e620a-990a-4612-88fb-8dfed87e3238","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2506.02040","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:283552fb107f00740ee4fa048296e9357de72a149932fd83e6b9f28c566eecda","observation_id":"f0896815-4e07-4608-a0a2-a08e267f52a6","resolution":{"observed_at":"2026-07-09T10:26:11.080465Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12566","last_updated":"2025-08-18T02:06:05Z","snapshot_observed_at":"2026-08-09T05:32:26.683879Z","submitted_at":"2025-08-18T02:06:05Z","title":"Help or Hurdle? Rethinking Model Context Protocol-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":"2508.12566","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.12566","snapshot_observed_at":"2026-07-09T10:26:11.065982Z","title":"Help or Hurdle? Rethinking Model Context Protocol-Augmented Large Language Models","venue":"cs.AI","work_id":"48ac850e-869e-4cd9-aced-ac203ad62389","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2508.12566","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:9e0589888e07ee737efa9a2654d3f7f77e9166cb38a8f0c61ff39549b721a2eb","observation_id":"982000e7-e4da-4df6-a95e-f0f70bc679b1","resolution":{"observed_at":"2026-07-09T10:26:11.067163Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2505.11154","doi":"10.48550/arxiv.2505.11154","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mpma: Preference manipulation attack against model context protocol","venue":"ArXiv.org","work_id":"a2dcd840-29d4-4ee6-b5dc-2eff7e281fb5","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:4adac835dad8fc71c9541cc3220537926fba4cb1ecbcbeaa78fa800126f4d44d","observation_id":"19aa4470-ea30-49c3-818f-d6dc7fe5333e","resolution":{"observed_at":"2026-07-09T10:26:11.088303Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":"2310.06387","doi":"10.48550/arxiv.2310.06387","metadata_source":"pith","pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations","venue":"cs.LG","work_id":"4fe10dc2-a8a4-46ec-bb39-b0edae135f1d","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:09eccc0aa4b6b6aa7dc9211708baf56453dafd5a3f6d8314f378aaae3f97ba53","observation_id":"121b3da8-53a6-49bf-a5ae-cf67e5e61b74","resolution":{"observed_at":"2026-07-09T10:26:11.097166Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-24T00:53:10.432951+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T00:53:10.432951+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.316740Z","title":"Silent taint-style vulnerability fixes identifica- tion","venue":null,"work_id":"06d2be81-c78b-40c1-888b-f164836513e4","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:63dbe261ce26c63108e93fbfec94dacada23cb83a9d2bf88f6759156de0d9cf3","observation_id":"46d9247e-4d0d-4ab7-82b2-8400a257fc6f","resolution":{"observed_at":"2026-07-09T10:26:11.317940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.314971Z","title":"Defending chatgpt against jailbreak attack via self- reminder","venue":null,"work_id":"77f4b13d-6d50-4f34-bb81-5368f6d700e5","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:b6f942c854a2f4c67405200ce2f59603dc8640bac3e7fcab574121a71d104942","observation_id":"36847b7f-d5f7-4c8d-8b88-2ee2ff781ab6","resolution":{"observed_at":"2026-07-09T10:26:11.316172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.15144","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.101343Z","title":"MCPZoo: A large-scale dataset of runnable model context protocol servers for AI agent","venue":null,"work_id":"2935fac2-b31a-4f99-b029-ae044db79359","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:340e382fd3620dc63bc5836badb61227a6e48db0069ab4a66659672b8438671f","observation_id":"16da57ed-0554-4a76-8423-15c438fd1fa4","resolution":{"observed_at":"2026-07-09T10:26:11.102968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.320148Z","title":"Commitshield: Tracking vulner- ability introduction and fix in version control systems","venue":null,"work_id":"6613196f-090d-43e6-bde4-ead0a6ed0126","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:3041565f32b4be6dc259a3f41080c43166f938d4f62007abed27db1df71877a7","observation_id":"b6636e53-8ae4-48db-8c14-99ee20cf4ff5","resolution":{"observed_at":"2026-07-09T10:26:11.321365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24002","doi":"10.48550/arxiv.2509.24002","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcpmark: A benchmark for stress-testing realistic and comprehensive mcp use","venue":"ArXiv.org","work_id":"5b1fa0f7-d604-4d0f-85f2-a2e91356834d","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5e243a4dc09e43b87569bb706849e284ef07d76d5799bf8048cd7691f73b3238","observation_id":"4a0abde9-6f48-43d5-9558-4d97d687ef0e","resolution":{"observed_at":"2026-07-09T10:26:11.100117Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.10991","doi":"10.48550/arxiv.2508.10991","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp-guard: A defense framework for model context protocol integrity in large language model applications","venue":"arXiv (Cornell University)","work_id":"23467465-0354-4eb7-932b-81c5d9cfe39a","year":2026},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:bc20b16adc3e3036fd62dd66ba979e82da761ccac1f462cdb14aebdb1161f206","observation_id":"2b7f3724-c1f7-4827-84f9-4551451be5d9","resolution":{"observed_at":"2026-07-09T10:26:11.135889Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.318477Z","title":"Automatic inference of search patterns for taint-style vulnerabilities","venue":null,"work_id":"64df6344-9457-4d0b-8f57-cc6ea98c7e0f","year":2015},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:21cf45553f9f185028b7e69490bd7a86b00cf90d81d02787c775b6f0fb5c9e82","observation_id":"9b8158fa-3122-4265-9352-6051edadf0a9","resolution":{"observed_at":"2026-07-09T10:26:11.319641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.11407","last_updated":"2024-11-18T09:28:58Z","snapshot_observed_at":"2026-08-04T04:36:49.174974Z","submitted_at":"2024-11-18T09:28:58Z","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2411.11407","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.11407","snapshot_observed_at":"2026-07-09T10:26:11.084336Z","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","venue":"cs.LG","work_id":"94ec7e54-050c-4f7e-ae1e-64d8e3bd7019","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2411.11407","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:0c14a5ac2fe26ae8eea5b086d807d4eaa296cec681ad79b5ff29f25f66ef1fac","observation_id":"143b9b97-b693-4c2e-8d11-4a5f08341a9e","resolution":{"observed_at":"2026-07-09T10:26:11.085614Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.13220","doi":"10.48550/arxiv.2508.13220","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":"arXiv (Cornell University)","work_id":"4a91f798-a23b-4420-afe8-5230f40ee3e1","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5df075e3913c60be625474e300c6da7b7975b3a59f6ed2da8bbe68c18870dc46","observation_id":"b46294dd-b4ef-4c4c-9254-7a0fd48029c4","resolution":{"observed_at":"2026-07-09T10:26:11.083158Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.313149Z","title":"Precise discovery of more taint-style vulnerabilities in embedded firmware","venue":null,"work_id":"0b076507-6db5-427c-b410-f50ace18e894","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:383a10a566b341d77f766ace2bb6164524cecb2b66f779093ab80288119514a5","observation_id":"5cce09c2-c0be-408b-af97-a9315ccddb6b","resolution":{"observed_at":"2026-07-09T10:26:11.314445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02446","last_updated":"2024-01-27T22:54:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-03T21:30:56Z","title":"Low-Resource Languages Jailbreak GPT-4","version":2},"cited_work":{"arxiv_id":"2310.02446","doi":"10.48550/arxiv.2310.02446","metadata_source":"pith","pith_arxiv_id":"2310.02446","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Low-Resource Languages Jailbreak GPT-4","venue":"cs.CL","work_id":"e88f3256-3186-452b-ba46-58885055c4ec","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2310.02446","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:42cf637cedbe2c61d1d22cb6552756f8454a95ab7c07efedefeedc1fc1be0586","observation_id":"b8b7a5d9-06d6-497d-ac9b-cd082d2e9672","resolution":{"observed_at":"2026-07-09T10:26:11.124368Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":"2309.10253","doi":"10.48550/arxiv.2309.10253","metadata_source":"pith","pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","venue":"cs.AI","work_id":"230d395f-9220-4e6f-a52f-e593552b049b","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:cd43230623303f212dbb7e5ba55f84b3faed052001bd6c8a540cf2f022d44575","observation_id":"cad5c47d-60ec-4fe1-940c-e6166fd0bca7","resolution":{"observed_at":"2026-07-09T10:26:11.094533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-24T00:53:10.090181+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T00:53:10.090181+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.300474Z","title":"Don’t listen to me: Understanding and exploring jailbreak prompts 13 of large language models","venue":null,"work_id":"e941c1ff-e8d7-486c-b280-09a0738a1eed","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:23d3e3cd12782cb70aa422b9961156796fa471168191c101ee8e513b771ad67a","observation_id":"00a75fa0-8811-4429-af8d-9251dc60770c","resolution":{"observed_at":"2026-07-09T10:26:11.301676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06463","last_updated":"2024-03-26T04:23:12Z","snapshot_observed_at":"2026-07-06T16:05:31.757410Z","submitted_at":"2023-08-12T04:05:57Z","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","version":2},"cited_work":{"arxiv_id":"2308.06463","doi":null,"metadata_source":"pith","pith_arxiv_id":"2308.06463","snapshot_observed_at":"2026-07-09T10:26:11.073540Z","title":"Gpt- 4 is too smart to be safe: Stealthy chat with llms via cipher","venue":"cs.CL","work_id":"c0bea3ab-35ce-4045-8b4f-46d34943d688","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2308.06463","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:39f4b004a1a624a5eaf4e4e71171c5c83f070f958f425f55cfb38ff40f1bddf5","observation_id":"962a42cb-4562-4ad7-841a-b05e624492e8","resolution":{"observed_at":"2026-07-09T10:26:11.075003Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.296847Z","title":"How johnny can persuade llms to jailbreak them: Rethinking persuasion to chal- lenge ai safety by humanizing llms","venue":null,"work_id":"555db292-d1d2-4063-96fe-b80a8b3ced43","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:88b745219903675a45c88cec111adf596b3475306352a8362bee293e013ec83e","observation_id":"76ce3ab6-7f0e-4037-867e-0f9786f8a039","resolution":{"observed_at":"2026-07-09T10:26:11.298094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-07T06:17:52.920196Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":"2403.04783","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-07-09T10:26:11.076263Z","title":"Autodefense: Multi-agent llm defense against jailbreak attacks","venue":"cs.LG","work_id":"2470c178-add6-463c-b04b-b4d405767b5d","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:2aa633dd683ed3a52479d1ab397ccd26ebfe25d9beb25d9ad4d969e5dbd499c7","observation_id":"820b58bb-20bb-41c9-82a6-f5c7487c9d40","resolution":{"observed_at":"2026-07-09T10:26:11.077468Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.15994","doi":"10.48550/arxiv.2510.15994","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"arXiv (Cornell University)","work_id":"988cfe85-3eea-4356-8fc1-fe54e5b4b81d","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:60e724cd129aa76417546bc2c7e35b62ecbeb1d52f12299d558b8b1d467dcaa5","observation_id":"4fff98bb-d63c-4dad-84ba-33277a7a35d2","resolution":{"observed_at":"2026-07-09T10:26:11.072266Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.298673Z","title":"Statically discov- ering high-order taint style vulnerabilities in os kernels","venue":null,"work_id":"d2f81972-7379-465c-b932-df79216ca796","year":2021},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:0bfe6be980c149bed945f242e5db3e28a9b296a84c6aa770c3779e696e00b3c0","observation_id":"9774f6cb-1d32-4537-b403-38ec4d020f65","resolution":{"observed_at":"2026-07-09T10:26:11.299937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.302207Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"d9feb0eb-2f39-4a76-927e-e8d3c25540e0","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:d4c6b1ffc00b1931f018ea00c3bdde75b2eaf300850e3f495bb4e6fab500ce50","observation_id":"dc761625-76ea-431b-a4e0-356dbda7926c","resolution":{"observed_at":"2026-07-09T10:26:11.303518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.295062Z","title":"Defending large language models against jailbreaking attacks through goal priori- tization","venue":null,"work_id":"81ede594-a53f-4bde-bc64-90251b17b94f","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:2d2d9205379eaff2eb019c64bf694cd7225bf3f65b3dcd6c02f3b79d1aca131e","observation_id":"be738356-2d49-4057-9a75-a9086bb30c9a","resolution":{"observed_at":"2026-07-09T10:26:11.296292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:5b2d2f02c3fe1a3b41f1a80dec47d5494615e43fe0ddc7ea7e58430dddd2072c","observation_id":"8935ad23-5e17-49c4-a9ff-1faf3909d134","resolution":{"observed_at":"2026-07-09T10:26:11.069633Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions"},"reference_resolution":{"displayed":74,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":1,"unresolved":1,"verified_exact":26,"verified_fuzzy":44},"total_outbound_references":74},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 74 of 74 outbound references and 0 inbound Pith citation observations for arXiv:2607.07461."}