[java-sig-commits] [Bug 1997772] CVE-2021-39144 xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*