NO-ISSUE: Bump `xstream` to version `1.4.21`

apache / incubator-kie-drools

Drools is a rule engine, DMN engine and complex event processing (CEP) engine for Java.

http://www.drools.org

Apache License 2.0

5.88k stars 2.5k forks source link

Closed yesamer closed 6 days ago

yesamer commented 1 week ago

The current xstream 1.4.20 is affected by CVE-2024-47072. Updating xstream to ´1.4.21´ resolves the CVE

porcelli commented 1 day ago

@yesamer @baldimir @gitgabrio missing updates on optaplanner and kogito-apps repos