[java-sig-commits] [Bug 1942550] CVE-2021-21343 XStream: arbitrary file deletion on the local host via crafted input stream