[java-sig-commits] [Bug 1942550] New: CVE-2021-21343 XStream: arbitrary file deletion on the local host via crafted input stream