[java-sig-commits] [Bug 1997781] CVE-2021-39148 xstream: vulnerable to an arbitrary code execution attack