[java-sig-commits] [Bug 2134298] New: CVE-2022-40156 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks [fedora-all]