[java-sig-commits] [Bug 1942558] CVE-2021-21345 XStream: allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream