CVE-2026-116556 — Argilla TextField.vue cross-site scripting
A vulnerability was found in Argilla up to version 2.8.0. It affects an unknown function in argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. Manipulation of the “text” argument results in cross-site scripting. The attack can be executed remotely, and the exploit has been made public and could be used.
CERT24