{"id":"RUSTSEC-2026-0370","revision":"a401a78c6b98468da748e8702b8c563b","records":[{"revision":"a401a78c6b98468da748e8702b8c563b","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2026-0370","aliases":[],"title":"`zvariant` is unmaintained","description":"The `zvariant` crate is no longer maintained as a standalone crate.\n\nIt has been merged into [`zbus`](https://crates.io/crates/zbus) starting with version `6.0.0`, as its `wire` module.\n\nUsers should migrate to [`zbus`](https://crates.io/crates/zbus), with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to [`zgvariant`](https://crates.io/crates/zgvariant).","state":0,"publishedAt":"2026-10-16T12:00:00+00:00","modifiedAt":"2026-10-17T15:30:02.3900325+00:00","affected":[{"ecosystem":"crates.io","name":"zvariant","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/zvariant","https://rustsec.org/advisories/RUSTSEC-2026-0370.html","https://github.com/z-galaxy/zbus/issues/2043"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2026-0370","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2026-0370","identifiers":["RUSTSEC-2026-0370"]},"retained":false,"historicalAffected":[]}],"coverage":[]}