[java-sig-commits] [Bug 2128959] CVE-2022-40154 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks