com.thoughtworks.xstream:xstream is a simple library to serialize objects to XML and back again.Affected versions of this package are vulnerable to Denial of Service (DoS). An attacker can manipulate the processed input stream at unmarshalling time, and replace or inject objects.