[java-sig-commits] [Bug 1942637] CVE-2021-21350 XStream: allow a remote attacker to execute arbitrary code only by manipulating the processed input stream