RUSTSEC-2026-0370 `zvariant` is unmaintained
The zvariant crate is unmaintained, requiring users to migrate to zbus or zgvariant to ensure continued support and security.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2026-0370?
RUSTSEC-2026-0370 is a vulnerability in zvariant, published on 16 Oct 2026.
Official description
The zvariant crate is no longer maintained as a standalone crate.
It has been merged into zbus starting with version 6.0.0, as its wire module.
Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to zgvariant.
Which versions are affected by RUSTSEC-2026-0370?
1 open source package ship an affected version, including zvariant.
| Package | Affected | Fixed in |
|---|---|---|
zvariant crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2026-0370?
No fix has been published for RUSTSEC-2026-0370 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2026-0370 being exploited?
There is no known exploitation of RUSTSEC-2026-0370 in the wild and no public exploit code.