[java-sig-commits] [Bug 1942578] CVE-2021-21346 XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue