[java-sig-commits] [Bug 1908837] CVE-2020-26259 XStream: arbitrary file deletion on the local host when unmarshalling