Threats affecting pkg:cargo/nushell/nushell

CVE-2026-124992 is a medium-severity vulnerability in nushell versions 0.116.0 and 0.116.1. It involves improper neutralization of escape, meta, or control sequences in the escape_bytes function within the Data Conversion Handler component. The issue requires local access to exploit and does not involve user interaction. A fix has been proposed but is not yet accepted or available.