[WW-5329] Upgrade xstream to version 1.4.20

• Type: Dependency
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 6.3.0
• Component/s: Core
• Assignee: Unassigned
• Reporter: Lukasz Lenart
• Created: 01/Aug/23 08:10
• Updated: 01/Aug/23 10:42
• Resolved: 01/Aug/23 10:42

Description

This maintenance release addresses the security vulnerabilities CVE-2022-40151 and CVE-2022-41966, causing a Denial of Service by raising a stack overflow. It also provides new converters for Optional and Atomic types.

Issue Links

• links to: GitHub Pull Request #721