{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:AX4MZOWTKLYONWGAMIN3KK3SEI","short_pith_number":"pith:AX4MZOWT","canonical_record":{"source":{"id":"2404.03027","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-03T19:23:18Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"69f41dfeede5dd9a4a872618aa9480beefe3ac3a22ef0e068b4ad79e7b228611","abstract_canon_sha256":"b4477e5f3796336d9ea0000cd74354f6ecb37967be089f9969cb8389c046bad3"},"schema_version":"1.0"},"canonical_sha256":"05f8ccbad352f0e6d8c0621bb52b72223de5314335d1bba1126f7866d44925f6","source":{"kind":"arxiv","id":"2404.03027","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.03027","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.03027v4","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.03027","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_12","alias_value":"AX4MZOWTKLYO","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_16","alias_value":"AX4MZOWTKLYONWGA","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_8","alias_value":"AX4MZOWT","created_at":"2026-07-05T09:39:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:AX4MZOWTKLYONWGAMIN3KK3SEI","target":"record","payload":{"canonical_record":{"source":{"id":"2404.03027","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-03T19:23:18Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"69f41dfeede5dd9a4a872618aa9480beefe3ac3a22ef0e068b4ad79e7b228611","abstract_canon_sha256":"b4477e5f3796336d9ea0000cd74354f6ecb37967be089f9969cb8389c046bad3"},"schema_version":"1.0"},"canonical_sha256":"05f8ccbad352f0e6d8c0621bb52b72223de5314335d1bba1126f7866d44925f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:39:22.235567Z","signature_b64":"9sHM1DOng9Zyy/e3AR/DorgnSJdC5FDqVUM3rjapdZyu21QHaTFmdfHYtLcQ+crrlkHFQ6ElW74N7dI3/jbNCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"05f8ccbad352f0e6d8c0621bb52b72223de5314335d1bba1126f7866d44925f6","last_reissued_at":"2026-07-05T09:39:22.235105Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:39:22.235105Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.03027","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:39:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bz8vm2oHWw8U6Rmvg5eyrPsXKC4GB8T0BCAZmMdXsK5XQ8WTg2fV9sfb6G6bL6HPYyLgNPHjox5Y2HUMGVj9Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:48:38.110952Z"},"content_sha256":"a530a97896c953995aa672a294cdf25fb42f0007ec453c0985410ff10bdc3372","schema_version":"1.0","event_id":"sha256:a530a97896c953995aa672a294cdf25fb42f0007ec453c0985410ff10bdc3372"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:AX4MZOWTKLYONWGAMIN3KK3SEI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Chaowei Xiao, Siyuan Ma, Weidi Luo, Xiaogeng Liu, Xiaoyu Guo","submitted_at":"2024-04-03T19:23:18Z","abstract_excerpt":"With the rapid advancements in Multimodal Large Language Models (MLLMs), securing these models against malicious inputs while aligning them with human values has emerged as a critical challenge. In this paper, we investigate an important and unexplored question of whether techniques that successfully jailbreak Large Language Models (LLMs) can be equally effective in jailbreaking MLLMs. To explore this issue, we introduce JailBreakV-28K, a pioneering benchmark designed to assess the transferability of LLM jailbreak techniques to MLLMs, thereby evaluating the robustness of MLLMs against diverse "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.03027","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.03027/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:39:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ms5pFZHxKlfEMg1pGYKQ+XgAOND5N9QDpdIioIi2w3cMIi+9ijwRbsTAwmNzD/CuSUbMFDxSbr7LRdhuqRW+BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:48:38.111448Z"},"content_sha256":"94c8ecd0751e0c9c8703ee80b0e663c1530819fe0ac0aa3c73da7c04116e9705","schema_version":"1.0","event_id":"sha256:94c8ecd0751e0c9c8703ee80b0e663c1530819fe0ac0aa3c73da7c04116e9705"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/bundle.json","state_url":"https://pith.science/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T08:48:38Z","links":{"resolver":"https://pith.science/pith/AX4MZOWTKLYONWGAMIN3KK3SEI","bundle":"https://pith.science/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/bundle.json","state":"https://pith.science/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AX4MZOWTKLYONWGAMIN3KK3SEI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:AX4MZOWTKLYONWGAMIN3KK3SEI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4477e5f3796336d9ea0000cd74354f6ecb37967be089f9969cb8389c046bad3","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-03T19:23:18Z","title_canon_sha256":"69f41dfeede5dd9a4a872618aa9480beefe3ac3a22ef0e068b4ad79e7b228611"},"schema_version":"1.0","source":{"id":"2404.03027","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.03027","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.03027v4","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.03027","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_12","alias_value":"AX4MZOWTKLYO","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_16","alias_value":"AX4MZOWTKLYONWGA","created_at":"2026-07-05T09:39:22Z"},{"alias_kind":"pith_short_8","alias_value":"AX4MZOWT","created_at":"2026-07-05T09:39:22Z"}],"graph_snapshots":[{"event_id":"sha256:94c8ecd0751e0c9c8703ee80b0e663c1530819fe0ac0aa3c73da7c04116e9705","target":"graph","created_at":"2026-07-05T09:39:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.03027/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rapid advancements in Multimodal Large Language Models (MLLMs), securing these models against malicious inputs while aligning them with human values has emerged as a critical challenge. In this paper, we investigate an important and unexplored question of whether techniques that successfully jailbreak Large Language Models (LLMs) can be equally effective in jailbreaking MLLMs. To explore this issue, we introduce JailBreakV-28K, a pioneering benchmark designed to assess the transferability of LLM jailbreak techniques to MLLMs, thereby evaluating the robustness of MLLMs against diverse ","authors_text":"Chaowei Xiao, Siyuan Ma, Weidi Luo, Xiaogeng Liu, Xiaoyu Guo","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-03T19:23:18Z","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.03027","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a530a97896c953995aa672a294cdf25fb42f0007ec453c0985410ff10bdc3372","target":"record","created_at":"2026-07-05T09:39:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4477e5f3796336d9ea0000cd74354f6ecb37967be089f9969cb8389c046bad3","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-03T19:23:18Z","title_canon_sha256":"69f41dfeede5dd9a4a872618aa9480beefe3ac3a22ef0e068b4ad79e7b228611"},"schema_version":"1.0","source":{"id":"2404.03027","kind":"arxiv","version":4}},"canonical_sha256":"05f8ccbad352f0e6d8c0621bb52b72223de5314335d1bba1126f7866d44925f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"05f8ccbad352f0e6d8c0621bb52b72223de5314335d1bba1126f7866d44925f6","first_computed_at":"2026-07-05T09:39:22.235105Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:39:22.235105Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9sHM1DOng9Zyy/e3AR/DorgnSJdC5FDqVUM3rjapdZyu21QHaTFmdfHYtLcQ+crrlkHFQ6ElW74N7dI3/jbNCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:39:22.235567Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.03027","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a530a97896c953995aa672a294cdf25fb42f0007ec453c0985410ff10bdc3372","sha256:94c8ecd0751e0c9c8703ee80b0e663c1530819fe0ac0aa3c73da7c04116e9705"],"state_sha256":"7333c9ef9b27faa689b39b61177cfaf31add8dececffafa5d3778fcf0d0625a3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LlD+PUOURo9tbwqXeKzCcM72zarEO44pVqONm9+W1E5JGZ2mOHhMop+ogStaqy9lDrMvuUb2NsaGAEkjf5RRDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T08:48:38.116369Z","bundle_sha256":"92f03e530d34cecac2de9af0f19262916deaaa0784d0b32cb9e9875a97fa067f"}}