[java-sig-commits] [Bug 1966735] CVE-2021-29505 XStream: remote command execution attack by manipulating the processed input stream