[java-sig-commits] [Bug 2134289] New: CVE-2022-40155 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks