CVE-2026-124992 | nushell up to 0.116.1 Data Conversion ser.rs escape_bytes control sequence (Issue 19197)

SecurityVulns
Yanac

A vulnerability has been found in nushell up to 0.116.1 and classified as problematic. Impacted is the function escape_bytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences.

This vulnerability is listed as CVE-2026-124992. The attack must be carried out locally. In addition, an exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More