TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models | Paper Citation Record

Observation 6bdb8ee0-9e63-4cbc-8a81-1d562c3e68ff · outbound

This paper cites T.; Kljun, M.; Quigley, A.; C opi c Pucihar, K.; Grubert, J.; Biener, V.; Leiva, L.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models T.; Kljun, M.; Quigley, A.; C opi c Pucihar, K.; Grubert, J.; Biener, V.; Leiva, L

Reference 1

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.291958Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 062a1f10-5598-4ad2-b7c2-bba7c84c63b6 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.296831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b7e5dd13-4546-4294-90b3-6fbd425f9573 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.299633Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 00406c6c-4cf0-4baf-99ee-1af71f299088 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.305914Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 490d41d9-d398-415a-8ed7-5c240c2eb23d · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.315074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 132c6906-b87f-4c74-b16f-316bb64dde50 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.317843Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 210f1fc6-cb86-4e65-a127-776d3828209f · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.320382Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d810318-82f6-4d5f-82ad-7d1dbad795a2 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.323087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b848ca81-4652-4c11-a7bb-338079de0540 · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 12

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.325664Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e70b42f4-a965-47af-a3cf-a958e3eb59dc · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.328437Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 307204e9-b59a-4356-95b2-3dfe24443d7e · outbound

This paper cites H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking

Reference 14

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.331731Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b777e41-7422-4d6e-9991-2f77395c7147 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 15

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.334641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f8cd89da-2c0e-40e3-b113-b041309d50bd · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.337242Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d56beffd-b9e9-4717-b051-8a8d802e7017 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.340008Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96519aa2-bc85-490c-8d0b-4478ffe33297 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.346056Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f5937774-b249-4a7a-8578-d8b5dfc10793 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 21

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.351680Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbf2d95d-1d34-49d3-a800-7f2cbb890486 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.354372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 956be2b9-59b3-480b-8611-a99a35fa1d9f · outbound

This paper cites W.; Hallacy, C.; Ramesh, A.; Goh, G.; Agarwal, S.; Sastry, G.; Askell, A.; Mishkin, P.; Clark, J.; Krueger, G.; and Sutskever, I.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models W.; Hallacy, C.; Ramesh, A.; Goh, G.; Agarwal, S.; Sastry, G.; Askell, A.; Mishkin, P.; Clark, J.; Krueger, G.; and Sutskever, I

Reference 23

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.357194Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f4478bc5-77a0-497d-9c20-6a3ee4f2b863 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 26

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.366327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ebd80c23-26ea-4cf3-9313-bdd772105148 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.371519Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation abc75127-7f1e-4d8c-ae92-ee788edd7b89 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.374077Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 43c79373-400b-4a74-9b4a-07dfc6bcd9c5 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 30

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.376553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f2399a24-82de-4832-883a-22ce6cfcbd3a · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 32

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.381740Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9400e564-f9ef-483c-bb77-3e96a062ed61 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 34

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.386655Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96aade7f-2b7b-4e30-8532-39006d5cff41 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 37

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.394158Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4352852c-6dcb-445c-99f6-b69badb963bb · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 39

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.401816Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 519b8494-94ec-45bf-9685-e3e44a8c5816 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 41

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.409372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e67760ea-e28e-4f1c-a38c-695a67ba8da0 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 42

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.412930Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e2764c7d-a22c-4174-87af-8ed6138d3c28 · outbound

This paper cites Qwen-Image-2.0 Technical Report.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Qwen-Image-2.0 Technical Report

Reference 43

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.417153Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56d4908e-7ca1-438f-868f-da57938fdc7c · outbound

This paper cites 2026 , howpublished =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 2026 , howpublished =

Reference 46

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.428868Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 45058d56-6155-42ca-9f3f-002cc223dd47 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 47

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.432497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9745f57c-b453-410b-bc09-0f0d7a7b64af · outbound

This paper cites Proceedings of the 38th International Conference on Neural Information Processing Systems (NeurIPS'24) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 38th International Conference on Neural Information Processing Systems (NeurIPS'24) , pages=

Reference 48

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.437124Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e1a566b3-effe-4284-b24d-d996b6ad03b4 · outbound

This paper cites 2025 IEEE Symposium on Security and Privacy (S&P'25) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 2025 IEEE Symposium on Security and Privacy (S&P'25) , pages=

Reference 49

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.441696Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ad9c1c4-8664-475a-ac66-fda8934a1792 · outbound

This paper cites Harnessing LLM to Attack LLM-Guarded Text-to-Image Models.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Harnessing LLM to Attack LLM-Guarded Text-to-Image Models

Reference 50

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.445668Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca8a2a74-3f32-40d1-a2d7-4238227ede7d · outbound

This paper cites 2024 IEEE symposium on security and privacy (S&P'24) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 2024 IEEE symposium on security and privacy (S&P'24) , pages=

Reference 51

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.449411Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 09ff4305-1809-4505-a764-1e2dc6cfc6f1 · outbound

This paper cites Knowledge-Based Systems , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Knowledge-Based Systems , volume=

Reference 52

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.453067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e9700e31-b891-4a6c-b70d-3e7bc64eaaa0 · outbound

This paper cites Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=

Reference 53

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.457027Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 209746ca-f33f-47c1-962a-340c1676b516 · outbound

This paper cites Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'22) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'22) , pages=

Reference 54

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.461584Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c32b76d9-33fd-43bc-891e-4470d8a8725b · outbound

This paper cites Hierarchical Text-Conditional Image Generation with CLIP Latents.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Hierarchical Text-Conditional Image Generation with CLIP Latents

Reference 55

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.465758Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 51bb5ece-cf6d-4077-ae22-a996def1b350 · outbound

This paper cites Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding

Reference 56

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.469975Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16bb53dd-f52e-4777-8577-aae0260e8e01 · outbound

This paper cites Advances in Neural Information Processing Systems (NeurIPS'23) , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Advances in Neural Information Processing Systems (NeurIPS'23) , volume=

Reference 57

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.473756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6bd279e6-6444-4b2a-85b5-81d7aafdc2b9 · outbound

This paper cites AnyText2: Visual Text Generation and Editing With Customizable Attributes.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models AnyText2: Visual Text Generation and Editing With Customizable Attributes

Reference 58

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.477918Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7812e5d9-539d-45bd-8353-6ed3a23385ed · outbound

This paper cites Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters

Reference 59

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.481380Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 78485eab-73b9-4794-840a-b74f8cb90123 · outbound

This paper cites GlyphDraw: Seamlessly Rendering Text with Intricate Spatial Structures in Text-to-Image Generation.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models GlyphDraw: Seamlessly Rendering Text with Intricate Spatial Structures in Text-to-Image Generation

Reference 60

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.484829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c0377ada-5677-462e-9597-e0af00be30fa · outbound

This paper cites arXiv preprint arXiv:2504.20376 , year=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models arXiv preprint arXiv:2504.20376 , year=

Reference 61

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.489499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d1e860ea-16ee-43f7-bec3-4b0c4c30aa4a · outbound

This paper cites Red-Teaming the Stable Diffusion Safety Filter.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Red-Teaming the Stable Diffusion Safety Filter

Reference 62

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.492793Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 14d6aa7b-5315-457e-9a4d-e4dbf474f626 · outbound

This paper cites Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'23) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR'23) , pages=

Reference 63

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.495922Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 953d3b1b-e820-4a79-abc3-0c821791cab4 · outbound

This paper cites Computer Vision -- ECCV 2024 , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Computer Vision -- ECCV 2024 , pages=

Reference 64

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.499507Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b2da54af-552a-46ef-a499-ed48f3fa4e44 · outbound

This paper cites arXiv preprint arXiv:2503.17987 , year=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models arXiv preprint arXiv:2503.17987 , year=

Reference 65

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.503135Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5bfedd4-da29-41ae-9b32-d7cf3b2306d4 · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 66

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.506268Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dfef2595-b7b2-444e-9fcd-9f672a9e48f9 · outbound

This paper cites Tree of Attacks: Jailbreaking Black-Box LLMs Automatically.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Tree of Attacks: Jailbreaking Black-Box LLMs Automatically

Reference 67

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.509403Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f68d1564-7e93-463c-a149-57ccdd4cd73f · outbound

This paper cites AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 68

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.512490Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 621ac1fe-2323-40ac-b96e-57388b455268 · outbound

This paper cites Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency , pages =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency , pages =

Reference 69

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.515521Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a0659be3-8d15-460a-9b39-e79d3ae145cc · outbound

This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts

Reference 70

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.519313Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5fe98e0-0159-48b3-b712-9bbead0b5b89 · outbound

This paper cites International Conference on Learning Representations (ICLR'24) , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models International Conference on Learning Representations (ICLR'24) , volume=

Reference 71

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.522359Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 33245419-4a00-4707-8c8b-84a1de732e52 · outbound

This paper cites Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the AAAI Conference on Artificial Intelligence (AAAI'25) , volume=

Reference 72

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.526083Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 124913a1-5ca9-4a95-9832-64132f74e958 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 73

Resolution: parse uncertain; no resolver link, observed 2026-07-31T09:23:52.530223Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b2986a47-134c-4daf-8390-27e3d71492a0 · outbound

This paper cites 2025 , howpublished =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 2025 , howpublished =

Reference 74

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.534087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 640aaff7-d3ac-4a81-9555-a0cf21c164ec · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 75

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.537731Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7f614e66-756d-49a8-9411-e67157124dc1 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 76

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.541288Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c50f1462-d9a1-4287-8136-762a9e967822 · outbound

This paper cites Text to Image Generation and Editing: A Survey.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Text to Image Generation and Editing: A Survey

Reference 77

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.544901Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 87c33e6a-8d1a-45c9-96a9-54d96d5c30c3 · outbound

This paper cites Proceedings of the 30th International Conference on Intelligent User Interfaces (IUI'25) , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 30th International Conference on Intelligent User Interfaces (IUI'25) , pages=

Reference 78

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.548416Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6356859c-070e-46e2-8e64-cd90c90f3539 · outbound

This paper cites Proceedings of the 2022 CHI conference on human factors in computing systems , pages=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 2022 CHI conference on human factors in computing systems , pages=

Reference 79

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.552052Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a13540b-7deb-4b52-86dc-95b34b72dbaa · outbound

This paper cites Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (ACL'25) (Volume 1: Long Papers) , pages =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (ACL'25) (Volume 1: Long Papers) , pages =

Reference 80

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.555613Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 370cd00e-4b3f-48a5-b9b5-5e7247385edd · outbound

This paper cites Proceedings of the 42nd International Conference on Machine Learning (ICML'25) , pages =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 42nd International Conference on Machine Learning (ICML'25) , pages =

Reference 81

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.559535Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0f4cffe-a288-4d4c-9aa7-972689cba8a8 · outbound

This paper cites Proceedings of the 38th International Conference on Machine Learning (ICML'21) , pages =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the 38th International Conference on Machine Learning (ICML'21) , pages =

Reference 82

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.563320Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bcffcbf5-397b-458d-a2e1-7338d0f9696d · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 83

Resolution: parse uncertain; no resolver link, observed 2026-07-31T09:23:52.567297Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 202c6a93-7f9e-4f3b-907e-f5a95b4b3f0d · outbound

This paper cites 2025 , doi =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 2025 , doi =

Reference 84

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.570901Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 13b79b83-824e-4ce6-950c-5cba9122b9f0 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 85

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.574488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ccbf26b3-887b-43a4-b90f-82fdc9cd57d2 · outbound

This paper cites an unresolved cited work.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Unresolved cited work

Reference 86

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.578170Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0e60a442-00f2-4a4d-ad51-fac42d8d425c · outbound

This paper cites Applied Mathematics and Computation , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Applied Mathematics and Computation , volume=

Reference 87

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.581531Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aedf8940-9da7-4c37-987a-187ebc416f46 · outbound

This paper cites Proceedings of the Ninth International Conference on Document Analysis and Recognition (ICDAR'07) , volume =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the Ninth International Conference on Document Analysis and Recognition (ICDAR'07) , volume =

Reference 88

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.584952Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 755d5c12-522e-486c-b364-a1b4b4f3052f · outbound

This paper cites arXiv preprint arXiv:2606.19348 , year=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models arXiv preprint arXiv:2606.19348 , year=

Reference 89

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.588720Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d701c809-0911-43e6-b219-2d808d7080bc · outbound

This paper cites 35th USENIX Security Symposium (USENIX Security 26) , year =.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models 35th USENIX Security Symposium (USENIX Security 26) , year =

Reference 90

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.592018Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ed434098-05cc-474a-a556-0fd37779f3fc · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Advances in Neural Information Processing Systems , volume=

Reference 91

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.595864Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 645ee5b6-15dc-400a-a28b-467228f04adf · outbound

This paper cites arXiv preprint arXiv:2411.11683 , year=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models arXiv preprint arXiv:2411.11683 , year=

Reference 92

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.599475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 13e8f177-ad24-4d22-9ff7-11500e01abc2 · outbound

This paper cites Proceedings of the Thirteenth International Conference on Learning Representations , year=.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models Proceedings of the Thirteenth International Conference on Learning Representations , year=

Reference 93

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.602450Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers