Jailbreak Attack on MM-SafetyBench Gemini-3.0 (ALL)
2.38Average Toxicity (AvgTox)QR
Evaluation Results
| Method | Links | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| QRAttack=QR2026.04 | 2.38 | 26.52 | 7.22 | 6.13 | 20.45 | 32.64 | 50 | 14.94 | 20.18 | 49.02 | 16.55 | 17.69 | 47.31 | 25.69 | 36.91 | 26.52 | |
| JPSAttack=JPS2026.04 | 3.2 | 46.47 | 34.18 | 26.47 | 36.22 | 61.83 | 67.42 | 35.76 | 29.41 | 63.55 | 40.82 | 42.36 | 59.14 | 47.06 | 59.88 | 46.47 | |
| MosaicAttack=Mosaic2026.04 | 4.04 | 70.73 | 71.13 | 58.9 | 54.55 | 84.72 | 81.15 | 69.48 | 46.79 | 77.12 | 68.35 | 70 | 73.65 | 79.82 | 83.89 | 70.73 |