---
title: "Who cites FigStep: Jailbreaking Large — 87 citing papers"
description: "87 papers of the Elamur Research library cite «FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts», found…"
canonical: "https://research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [FigStep: Jailbreaking Large Vision-Language…](https://md.research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/) / cited by

# Who cites «FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts»

87 papers of our library cite it (of the 149,439 whose bibliographies we read) · 27 with a page here, the most cited first · [← back to «FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts»](https://md.research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/)

1. [**The Prompt Report: A Systematic Survey of Prompt Engineering Techniques arXiv:2406.06608**Sander Schulhoff, Michael Ilie, Nishant Balepur, et al.*2024 · 189 citations*](https://md.research.elamur.ai/free/en/papers/schulhoff-2024-prompt-report-systematic-survey-prompt/)
2. **[MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/liu-2023-mm-safetybench-benchmark-safety-evaluation/) [Lecture notes in computer science](https://md.research.elamur.ai/free/en/venues/lecture-notes-in-computer-science/)**Xin Liu, Yichen Zhu, Jindong Gu, et al.*2023 · 152 citations*
3. [**Foundational Challenges in Assuring Alignment and Safety of Large Language Models arXiv:2404.09932**Usman Anwar, Abulhair Saparov, Javier Rando, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/anwar-2024-foundational-challenges-assuring-alignment-safety/)
4. [**JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks arXiv:2404.03027**Weidi Luo, Siyuan Ma, Xiaogeng Liu, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/luo-2024-jailbreakv-benchmark-assessing-robustness-multimodal/)
5. **[MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance](https://md.research.elamur.ai/free/en/papers/pi-2024-mllm-protector-ensuring-mllm-s/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Renjie Pi, Tianyang Han, Jianshu Zhang, et al.*2024 · 58 citations*
6. **[VLSBench: Unveiling Visual Leakage in Multimodal Safety](https://md.research.elamur.ai/free/en/papers/hu-2025-vlsbench-unveiling-visual-leakage-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xuhao Hu, Dongrui Liu, Hao Li, et al.*2025 · 32 citations*
7. **[Jailbreak Large Vision-Language Models Through Multi-Modal Linkage](https://md.research.elamur.ai/free/en/papers/wang-2025-jailbreak-large-vision-language-models/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Wang, Xiaofei Zhou, Yichen Wang, et al.*2025 · 20 citations*
8. **[HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States](https://md.research.elamur.ai/free/en/papers/jiang-2025-hiddendetect-detecting-jailbreak-attacks-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yilei Jiang, Xinyan Gao, Tianshuo Peng, et al.*2025 · 15 citations*
9. **[Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring](https://md.research.elamur.ai/free/en/papers/hua-2026-rethinking-jailbreak-detection-large-vision/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Peichun Hua, Hao Li, Shanghao Shi, et al.*2026 · 10 citations*
10. **[VisCRA: A Visual Chain Reasoning Attack for Jailbreaking Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/sima-2025-viscra-visual-chain-reasoning-attack/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Bingrui Sima, Linhua Cong, Wenxuan Wang, et al.*2025 · 9 citations*
11. **[GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/hu-2026-gambit-gamified-jailbreak-framework-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiangdong Hu, Yangyang Jiang, Qin Hu, et al.*2026 · 6 citations*
12. **[Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection](https://md.research.elamur.ai/free/en/papers/ziqi-2025-visual-contextual-attack-jailbreaking-mllms/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Miao Ziqi, Yi Ding, Lijun Li, et al.*2025 · 6 citations*
13. **[SafeMT: Multi-turn Safety for Multimodal Language Models](https://md.research.elamur.ai/free/en/papers/zhu-2026-safemt-multi-turn-safety-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Han Zhu, Juntao Dai, Jiaming Ji, et al.*2026 · 3 citations*
14. **[Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World](https://md.research.elamur.ai/free/en/papers/sadasivan-2026-attacker-s-noise-can-manipulate/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Vinu Sankar Sadasivan, Soheil Feizi, Rajiv Mathews, et al.*2026 · 2 citations*
15. **[USB: A COMPREHENSIVE AND UNIFIED SAFETY EVALUATION BENCHMARK FOR MULTIMODAL LARGE LANGUAGE MODELS](https://md.research.elamur.ai/free/en/papers/zheng-2026-usb-comprehensive-unified-safety-evaluation/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Baolin Zheng, Guanlin Chen, Qingyang Teng, et al.*2026 · 1 citation*
16. **[When Helpers Become Hazards: A Benchmark for Analyzing Multimodal LLM-Powered Safety in Daily Life](https://md.research.elamur.ai/free/en/papers/lou-2026-when-helpers-become-hazards-benchmark/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Xinyue Lou, Xu Jinan, Jingyi Yin, et al.*2026 · 1 citation*
17. **[CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks](https://md.research.elamur.ai/free/en/papers/zhang-2026-crossguard-safeguarding-mllms-against-joint/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xu Zhang, Hao Li, Zhichao Lu*2026*
18. **[Defeating Cerberus: Privacy-Leakage Mitigation in Vision Language Models](https://md.research.elamur.ai/free/en/papers/zhang-2026-defeating-cerberus-privacy-leakage-mitigation/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Boyang Zhang, Istemi Ekin Akkus, Ruichuan Chen, et al.*2026*
19. **[DMN: A Compositional Framework for Jailbreaking Multimodal LLMs with Multi-Image Inputs](https://md.research.elamur.ai/free/en/papers/xu-2026-dmn-compositional-framework-jailbreaking-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wenzhuo Xu, Zhipeng Wei, Zonghao Ying, et al.*2026*
20. **[ECHA: Jailbreaking LVLMs via the Mismatch between Implicit Semantic Reconstruction and Explicit Safety Alignment](https://md.research.elamur.ai/free/en/papers/xu-2026-echa-jailbreaking-lvlms-mismatch-between/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Chenxing Xu, Junyong Jiang, Zehu Zhang, et al.*2026*
21. **[Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety Alignment](https://md.research.elamur.ai/free/en/papers/song-2026-hard-read-easy-jailbreak-how/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhixue Song, Boyan Han, Yiwei Wang, et al.*2026*
22. **[Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection](https://md.research.elamur.ai/free/en/papers/shao-2026-leave-my-images-alone-preventing/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zedian Shao, Hongbin Liu, Yuepeng Hu, et al.*2026*
23. **[MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models](https://md.research.elamur.ai/free/en/papers/makwana-2026-mlingualfc-evaluating-jailbreak-vulnerabilities-multilingual/) [Workshop on Multilinguality in the Era of Large Language Models](https://md.research.elamur.ai/free/en/venues/mellm/)**Rishabh Makwana, Mamta Mamta, Deeksha Varshney, et al.*2026*
24. **[Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks](https://md.research.elamur.ai/free/en/papers/sarwar-2026-multimodal-unlearning-across-vision-language/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Nobin Sarwar, Shubhashis Roy Dipta, Zheyuan Liu, et al.*2026*
25. **[StructBreak: Structural Cognitive Overload-Induced Safety Failures in MLLMs](https://md.research.elamur.ai/free/en/papers/luo-2026-structbreak-structural-cognitive-overload-induced/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yang Luo, Liu Xinran, TianTian Ji, et al.*2026*
26. **[The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Training](https://md.research.elamur.ai/free/en/papers/zhang-2026-art-mis-alignment-how-fine/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Rui Zhang, Hongwei Li, Yun Shen, et al.*2026*
27. **[Visual Self-Fulfilling Alignment: Shaping Safety-Oriented Personas via Threat-Related Images](https://md.research.elamur.ai/free/en/papers/yang-2026-visual-self-fulfilling-alignment-shaping/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qishun Yang, Shu Yang, Lijie Hu, et al.*2026*

60 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/) — FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts