[java-sig-commits] [Bug 1942578] CVE-2021-21346 XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream