EUVD-2026-110499

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.fromdisk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting...

CVE-2026-116554

A cross-site scripting (XSS) vulnerability exists in Argilla versions up to 2.8.0 . The flaw is located in the Dataset.from_disk function within the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the Settings Page component. An attacker can trigger the XSS by ma...