EUVD-2026-120415

A vulnerability was identified in nushell up to 0.116.1. Impacted is the function escapebytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences. The attack must be carried out...

CVE-2026-124992

A vulnerability exists in nushell up to version 0.116.1 within the Data Conversion Handler component. Specifically, the escape_bytes function in the file crates/nu-json/src/ser.rs fails to properly neutralize escape, meta, or control sequences. This flaw requires local access to exploit. A pull r...