RUSTSEC-2026-0372
`zvariant_derive` is unmaintained
The zvariant_derive crate is no longer maintained as a standalone crate.
Its derive macros are provided by zbus starting with version 6.0.0.
Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format.
What each source reports
OSV No score
`zvariant_derive` is unmaintained
The zvariant_derive crate is no longer maintained as a standalone crate.
Its derive macros are provided by zbus starting with version 6.0.0.
Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format.
- Record
RUSTSEC-2026-0372- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zvariant_derivecrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0372 is a vulnerability with no CVSS score yet in zvariant_derive, published October 16, 2026. No source lists public exploit code. No source names a fixed version.