{"id":"RUSTSEC-2026-0372","summary":"`zvariant_derive` is unmaintained","details":"The `zvariant_derive` crate is no longer maintained as a standalone crate.\n\nIts derive macros are provided by [`zbus`](https://crates.io/crates/zbus) starting with version `6.0.0`.\n\nUsers should migrate to [`zbus`](https://crates.io/crates/zbus), with its default features disabled if they only need the D-Bus wire format.","modified":"2026-10-17T15:30:02.394812511Z","published":"2026-10-16T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/zvariant_derive"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0372.html"},{"type":"REPORT","url":"https://github.com/z-galaxy/zbus/issues/2043"}],"affected":[{"package":{"name":"zvariant_derive","ecosystem":"crates.io","purl":"pkg:cargo/zvariant_derive"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"ecosystem_specific":{"affects":{"functions":[],"arch":[],"os":[]},"affected_functions":null},"database_specific":{"informational":"unmaintained","categories":[],"cvss":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0372.json"}}],"schema_version":"1.9.0"}