A cross-site scripting vulnerability was found in Argilla up to version 2.8.0 in the Sandbox.vue component. The vulnerability is triggered by manipulating the template argument. Remote exploitation is possible. The project was informed but has not responded yet. This vulnerability affects Argilla deployments, particularly those using versions 2.0 to 2.8.0, and defenders should assess exposure and prioriti [truncated]
A cross-site scripting vulnerability exists in Argilla up to 2.8.0 in the Dataset.from_disk function of the SettingsInfo.vue file. This issue allows remote attackers to execute cross-site scripting attacks by manipulating the Name argument. The vulnerability has been publicly disclosed and may be used by attackers. Defenders should assess the potential impact on their systems and prioritize verification a [truncated]
