[java-sig-commits] [Bug 1908833] New: CVE-2020-26258 xstream: Server-Side Forgery Request vulnerability can be activated when unmarshalling [fedora-all]