{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:N7RKEAMC55AL5ZFLVGXGP5P5J3","short_pith_number":"pith:N7RKEAMC","canonical_record":{"source":{"id":"2311.05608","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-11-09T18:59:11Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"4ec9b2ec1fe0b2a0fa8e7cf9cb2dbe36fd72e63d417c79582a4c8ef7e29d709a","abstract_canon_sha256":"48e395afe9b1dab09f4d6f88069fffdcb11e5b607045ecf57f7c3bdf4793729f"},"schema_version":"1.0"},"canonical_sha256":"6fe2a20182ef40bee4aba9ae67f5fd4eec32c97857356c14ca58f5ab974016b2","source":{"kind":"arxiv","id":"2311.05608","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.05608","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"arxiv_version","alias_value":"2311.05608v3","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.05608","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_12","alias_value":"N7RKEAMC55AL","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_16","alias_value":"N7RKEAMC55AL5ZFL","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_8","alias_value":"N7RKEAMC","created_at":"2026-07-05T10:02:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:N7RKEAMC55AL5ZFLVGXGP5P5J3","target":"record","payload":{"canonical_record":{"source":{"id":"2311.05608","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-11-09T18:59:11Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"4ec9b2ec1fe0b2a0fa8e7cf9cb2dbe36fd72e63d417c79582a4c8ef7e29d709a","abstract_canon_sha256":"48e395afe9b1dab09f4d6f88069fffdcb11e5b607045ecf57f7c3bdf4793729f"},"schema_version":"1.0"},"canonical_sha256":"6fe2a20182ef40bee4aba9ae67f5fd4eec32c97857356c14ca58f5ab974016b2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:02:42.173606Z","signature_b64":"8M/LDj1RFCXKBB10Yzu7qYIMrVsAdAWJ9FAntwTXCsEDswUewuyFa1qYFLmUHGQ/dtvrDT0clDYbvtq0eHF2BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6fe2a20182ef40bee4aba9ae67f5fd4eec32c97857356c14ca58f5ab974016b2","last_reissued_at":"2026-07-05T10:02:42.172895Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:02:42.172895Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.05608","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y4Q1XzvIJrs6XXi8UldhZqw5GmpLBYaNvInqSM9VEZqV/JLpeRjS/EKZ+GXnDoXfvv6hZzjuc4/9tAGwNUkvAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:06:00.378532Z"},"content_sha256":"e13bea2213ff84a972a6ffe60961b2b86ed90a29c2408b1d05e13ad753e66fe2","schema_version":"1.0","event_id":"sha256:e13bea2213ff84a972a6ffe60961b2b86ed90a29c2408b1d05e13ad753e66fe2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:N7RKEAMC55AL5ZFLVGXGP5P5J3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Anyu Wang, Conglei Wang, Delong Ran, Jinyuan Liu, SiSi Duan, Tianshuo Cong, Xiaoyun Wang, Yichen Gong","submitted_at":"2023-11-09T18:59:11Z","abstract_excerpt":"Large Vision-Language Models (LVLMs) signify a groundbreaking paradigm shift within the Artificial Intelligence (AI) community, extending beyond the capabilities of Large Language Models (LLMs) by assimilating additional modalities (e.g., images). Despite this advancement, the safety of LVLMs remains adequately underexplored, with a potential overreliance on the safety assurances purported by their underlying LLMs. In this paper, we propose FigStep, a straightforward yet effective black-box jailbreak algorithm against LVLMs. Instead of feeding textual harmful instructions directly, FigStep con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.05608","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.05608/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zt9mlQ3fQ2pqWjdCaAtsKfejSWdVoFeDuO8LyXuZt/p/DFtykN0oTs4mR4bJUgGgO9aMomNemzbZX7FPKKB5Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:06:00.379074Z"},"content_sha256":"1f590534ccd454c20563420d2c2147c338345b4c9279b67409b3a4011f13d2b2","schema_version":"1.0","event_id":"sha256:1f590534ccd454c20563420d2c2147c338345b4c9279b67409b3a4011f13d2b2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/bundle.json","state_url":"https://pith.science/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T17:06:00Z","links":{"resolver":"https://pith.science/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3","bundle":"https://pith.science/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/bundle.json","state":"https://pith.science/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N7RKEAMC55AL5ZFLVGXGP5P5J3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:N7RKEAMC55AL5ZFLVGXGP5P5J3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"48e395afe9b1dab09f4d6f88069fffdcb11e5b607045ecf57f7c3bdf4793729f","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-11-09T18:59:11Z","title_canon_sha256":"4ec9b2ec1fe0b2a0fa8e7cf9cb2dbe36fd72e63d417c79582a4c8ef7e29d709a"},"schema_version":"1.0","source":{"id":"2311.05608","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.05608","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"arxiv_version","alias_value":"2311.05608v3","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.05608","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_12","alias_value":"N7RKEAMC55AL","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_16","alias_value":"N7RKEAMC55AL5ZFL","created_at":"2026-07-05T10:02:42Z"},{"alias_kind":"pith_short_8","alias_value":"N7RKEAMC","created_at":"2026-07-05T10:02:42Z"}],"graph_snapshots":[{"event_id":"sha256:1f590534ccd454c20563420d2c2147c338345b4c9279b67409b3a4011f13d2b2","target":"graph","created_at":"2026-07-05T10:02:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.05608/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Vision-Language Models (LVLMs) signify a groundbreaking paradigm shift within the Artificial Intelligence (AI) community, extending beyond the capabilities of Large Language Models (LLMs) by assimilating additional modalities (e.g., images). Despite this advancement, the safety of LVLMs remains adequately underexplored, with a potential overreliance on the safety assurances purported by their underlying LLMs. In this paper, we propose FigStep, a straightforward yet effective black-box jailbreak algorithm against LVLMs. Instead of feeding textual harmful instructions directly, FigStep con","authors_text":"Anyu Wang, Conglei Wang, Delong Ran, Jinyuan Liu, SiSi Duan, Tianshuo Cong, Xiaoyun Wang, Yichen Gong","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.05608","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e13bea2213ff84a972a6ffe60961b2b86ed90a29c2408b1d05e13ad753e66fe2","target":"record","created_at":"2026-07-05T10:02:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"48e395afe9b1dab09f4d6f88069fffdcb11e5b607045ecf57f7c3bdf4793729f","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-11-09T18:59:11Z","title_canon_sha256":"4ec9b2ec1fe0b2a0fa8e7cf9cb2dbe36fd72e63d417c79582a4c8ef7e29d709a"},"schema_version":"1.0","source":{"id":"2311.05608","kind":"arxiv","version":3}},"canonical_sha256":"6fe2a20182ef40bee4aba9ae67f5fd4eec32c97857356c14ca58f5ab974016b2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6fe2a20182ef40bee4aba9ae67f5fd4eec32c97857356c14ca58f5ab974016b2","first_computed_at":"2026-07-05T10:02:42.172895Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:02:42.172895Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8M/LDj1RFCXKBB10Yzu7qYIMrVsAdAWJ9FAntwTXCsEDswUewuyFa1qYFLmUHGQ/dtvrDT0clDYbvtq0eHF2BA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:02:42.173606Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.05608","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e13bea2213ff84a972a6ffe60961b2b86ed90a29c2408b1d05e13ad753e66fe2","sha256:1f590534ccd454c20563420d2c2147c338345b4c9279b67409b3a4011f13d2b2"],"state_sha256":"fc7a5be4d2ae2a302892a201730f3955922b48f2f07d252eae7be907d96b88da"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T7SG/y0Ys6XRSOWc9JbutyRFiF7guScK0VlzGSOsyYSTy38DHw4xtTn6HssCW/o/5C3Xmgsh5cY94UqjOPh+Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T17:06:00.383018Z","bundle_sha256":"6bd9de88cf86ce28fe9ebec48fd9c0c914de46cd9bfa6ed12170a4a89e6e14a6"}}