[java-sig-commits] [Bug 1942547] CVE-2021-21342 xstream: SSRF via crafted input stream [fedora-all]