---
id: RUSTSEC-2026-0370
title: '`zvariant` is unmaintained'
summary: '`zvariant` is unmaintained'
severity: none
vendor: zvariant
product: zvariant
ecosystem: rust
affected:
  - zvariant >= 0.0.0-0
published: '2026-10-16'
updated: '2026-10-17'
sourceUpdated: '2026-10-17T15:30:02.390032532Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/RUSTSEC-2026-0370'
references:
  - url: 'https://crates.io/crates/zvariant'
  - url: 'https://rustsec.org/advisories/RUSTSEC-2026-0370.html'
  - url: 'https://github.com/z-galaxy/zbus/issues/2043'
tags:
  - osv
  - rust
ingestedAt: '2026-10-18T11:51:09.859Z'
---

## Overview

The `zvariant` crate is no longer maintained as a standalone crate.

It has been merged into [`zbus`](https://crates.io/crates/zbus) starting with version `6.0.0`, as its `wire` module.

Users should migrate to [`zbus`](https://crates.io/crates/zbus), with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to [`zgvariant`](https://crates.io/crates/zgvariant).

## Affected packages

- `zvariant >= 0.0.0-0`

## Remediation

Refer to the advisory for the patched release.