{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"zvariant_derive","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"id":"tcs_01M5JHJ7C20N4HKXC9RRKAS4QN","modified_at":"2026-10-17T15:30:02.394812511Z","published_at":"2026-10-16T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0372","https://crates.io/crates/zvariant_derive","https://rustsec.org/advisories/RUSTSEC-2026-0372.html","https://github.com/z-galaxy/zbus/issues/2043"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0372","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0372"}],"summary":"`zvariant_derive` is unmaintained"}