[java-sig-commits] [Bug 1997772] New: CVE-2021-39144 xstream: vulnerable to a remote command execution attack