[java-sig-commits] [Bug 1942545] CVE-2021-21342 XStream: SSRF via crafted input stream