{"id":"RUSTSEC-2026-0372","revision":"9e6fde96532d48978e5487013e0944d4","records":[{"revision":"9e6fde96532d48978e5487013e0944d4","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2026-0372","aliases":[],"title":"`zvariant_derive` is unmaintained","description":"The `zvariant_derive` crate is no longer maintained as a standalone crate.\n\nIts derive macros are provided by [`zbus`](https://crates.io/crates/zbus) starting with version `6.0.0`.\n\nUsers should migrate to [`zbus`](https://crates.io/crates/zbus), with its default features disabled if they only need the D-Bus wire format.","state":0,"publishedAt":"2026-10-16T12:00:00+00:00","modifiedAt":"2026-10-17T15:30:02.3948125+00:00","affected":[{"ecosystem":"crates.io","name":"zvariant_derive","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/zvariant_derive","https://rustsec.org/advisories/RUSTSEC-2026-0372.html","https://github.com/z-galaxy/zbus/issues/2043"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2026-0372","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2026-0372","identifiers":["RUSTSEC-2026-0372"]},"retained":false,"historicalAffected":[]}],"coverage":[]}