{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:HOVPBG4ETX4347WWXM3FKYXIHN","short_pith_number":"pith:HOVPBG4E","canonical_record":{"source":{"id":"2308.01990","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-03T19:03:18Z","cross_cats_sorted":[],"title_canon_sha256":"34ce49bd4b5cb641573af3929d92ce00b11ba1fb959433b8bdcb199710e1a66e","abstract_canon_sha256":"f952f8877f3d1f3fb9fddfb488b0d015a211902b2c4c8062321f66a51c4ec301"},"schema_version":"1.0"},"canonical_sha256":"3baaf09b849df9be7ed6bb365562e83b6780c6252c4b6dd0dd9c10964e828f38","source":{"kind":"arxiv","id":"2308.01990","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.01990","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"arxiv_version","alias_value":"2308.01990v4","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.01990","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_12","alias_value":"HOVPBG4ETX43","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_16","alias_value":"HOVPBG4ETX4347WW","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_8","alias_value":"HOVPBG4E","created_at":"2026-07-05T10:06:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:HOVPBG4ETX4347WWXM3FKYXIHN","target":"record","payload":{"canonical_record":{"source":{"id":"2308.01990","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-03T19:03:18Z","cross_cats_sorted":[],"title_canon_sha256":"34ce49bd4b5cb641573af3929d92ce00b11ba1fb959433b8bdcb199710e1a66e","abstract_canon_sha256":"f952f8877f3d1f3fb9fddfb488b0d015a211902b2c4c8062321f66a51c4ec301"},"schema_version":"1.0"},"canonical_sha256":"3baaf09b849df9be7ed6bb365562e83b6780c6252c4b6dd0dd9c10964e828f38","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:06:01.394099Z","signature_b64":"zqUfMkPXmmGGSgwPggpzKASHNa6yzG+PTWz7FJbIPuhWGxD4R4nGk5Hz0vJzM5wU4l+jLQw2NYl1gvNlJqhoAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3baaf09b849df9be7ed6bb365562e83b6780c6252c4b6dd0dd9c10964e828f38","last_reissued_at":"2026-07-05T10:06:01.393595Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:06:01.393595Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.01990","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"olrH+aw6QC4gnVAj6l8+4qoOSGuaDT7MgoGRkFMwMnQ5SOC6RIF9M47QDGCiSAmIOJz8i+cR8bFfZj6gUBUtBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T01:37:49.258262Z"},"content_sha256":"46369bac44febfd96e2ef247efc491fd16bd09f255c893237bc7f780704f7264","schema_version":"1.0","event_id":"sha256:46369bac44febfd96e2ef247efc491fd16bd09f255c893237bc7f780704f7264"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:HOVPBG4ETX4347WWXM3FKYXIHN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniel Castro, Nuno Santos, Paulo Carreira, Rodrigo Pedro","submitted_at":"2023-08-03T19:03:18Z","abstract_excerpt":"Large Language Models (LLMs) have found widespread applications in various domains, including web applications, where they facilitate human interaction via chatbots with natural language interfaces. Internally, aided by an LLM-integration middleware such as Langchain, user prompts are translated into SQL queries used by the LLM to provide meaningful responses to users. However, unsanitized user prompts can lead to SQL injection attacks, potentially compromising the security of the database. Despite the growing interest in prompt injection vulnerabilities targeting LLMs, the specific risks of g"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.01990","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.01990/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MBLAjMvfgBF/N/cIcV8Je0VkihmIbhHWzBFBPlRaYQK6sLseQmty66hDM6bfhEZKqSj62r3YtogkpOIdjakzBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T01:37:49.258747Z"},"content_sha256":"74d94e415bf188145297fee39f8b0aac68849d4f2c9491f1df89fb075700011a","schema_version":"1.0","event_id":"sha256:74d94e415bf188145297fee39f8b0aac68849d4f2c9491f1df89fb075700011a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HOVPBG4ETX4347WWXM3FKYXIHN/bundle.json","state_url":"https://pith.science/pith/HOVPBG4ETX4347WWXM3FKYXIHN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HOVPBG4ETX4347WWXM3FKYXIHN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T01:37:49Z","links":{"resolver":"https://pith.science/pith/HOVPBG4ETX4347WWXM3FKYXIHN","bundle":"https://pith.science/pith/HOVPBG4ETX4347WWXM3FKYXIHN/bundle.json","state":"https://pith.science/pith/HOVPBG4ETX4347WWXM3FKYXIHN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HOVPBG4ETX4347WWXM3FKYXIHN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:HOVPBG4ETX4347WWXM3FKYXIHN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f952f8877f3d1f3fb9fddfb488b0d015a211902b2c4c8062321f66a51c4ec301","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-03T19:03:18Z","title_canon_sha256":"34ce49bd4b5cb641573af3929d92ce00b11ba1fb959433b8bdcb199710e1a66e"},"schema_version":"1.0","source":{"id":"2308.01990","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.01990","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"arxiv_version","alias_value":"2308.01990v4","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.01990","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_12","alias_value":"HOVPBG4ETX43","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_16","alias_value":"HOVPBG4ETX4347WW","created_at":"2026-07-05T10:06:01Z"},{"alias_kind":"pith_short_8","alias_value":"HOVPBG4E","created_at":"2026-07-05T10:06:01Z"}],"graph_snapshots":[{"event_id":"sha256:74d94e415bf188145297fee39f8b0aac68849d4f2c9491f1df89fb075700011a","target":"graph","created_at":"2026-07-05T10:06:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.01990/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have found widespread applications in various domains, including web applications, where they facilitate human interaction via chatbots with natural language interfaces. Internally, aided by an LLM-integration middleware such as Langchain, user prompts are translated into SQL queries used by the LLM to provide meaningful responses to users. However, unsanitized user prompts can lead to SQL injection attacks, potentially compromising the security of the database. Despite the growing interest in prompt injection vulnerabilities targeting LLMs, the specific risks of g","authors_text":"Daniel Castro, Nuno Santos, Paulo Carreira, Rodrigo Pedro","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-03T19:03:18Z","title":"From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.01990","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46369bac44febfd96e2ef247efc491fd16bd09f255c893237bc7f780704f7264","target":"record","created_at":"2026-07-05T10:06:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f952f8877f3d1f3fb9fddfb488b0d015a211902b2c4c8062321f66a51c4ec301","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-03T19:03:18Z","title_canon_sha256":"34ce49bd4b5cb641573af3929d92ce00b11ba1fb959433b8bdcb199710e1a66e"},"schema_version":"1.0","source":{"id":"2308.01990","kind":"arxiv","version":4}},"canonical_sha256":"3baaf09b849df9be7ed6bb365562e83b6780c6252c4b6dd0dd9c10964e828f38","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3baaf09b849df9be7ed6bb365562e83b6780c6252c4b6dd0dd9c10964e828f38","first_computed_at":"2026-07-05T10:06:01.393595Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:06:01.393595Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zqUfMkPXmmGGSgwPggpzKASHNa6yzG+PTWz7FJbIPuhWGxD4R4nGk5Hz0vJzM5wU4l+jLQw2NYl1gvNlJqhoAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:06:01.394099Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.01990","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46369bac44febfd96e2ef247efc491fd16bd09f255c893237bc7f780704f7264","sha256:74d94e415bf188145297fee39f8b0aac68849d4f2c9491f1df89fb075700011a"],"state_sha256":"2c909537a5ff7b0fb0eb13b8291a1a35e933bbce88a2aa18f8471ac3a4ef7745"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ImHBTx6d6YozMEeNJPtjFZK4BC5wrGeik1JruWLabtbV/6kuTGb7WpYmXMUEQmVo8oJ4J7xrXSxHW3QgpHqoDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T01:37:49.263135Z","bundle_sha256":"1ff7f79576a7c9d087e08a9dbd06f88da073c93be7731e46f4c07ee9d97a7d2c"}}