[java-sig-commits] [Bug 1942545] New: CVE-2021-21342 XStream: SSRF via crafted input stream