RUSTSEC-2026-0372None▾ Sunlit`zvariant_derive` is unmaintained
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
The zvariant_derive crate is no longer maintained as a standalone crate.
Its derive macros are provided by zbus starting with version 6.0.0.
Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format.
zvariant_derive >= 0.0.0-0Refer to the advisory for the patched release.