update xstream to 1.4.15

apolloconfig · Jan 30, 2021 · b2cb90e · b2cb90e
1 parent f28d0d5
commit b2cb90e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -286,6 +286,12 @@
 				<artifactId>guice</artifactId>
 				<version>4.1.0</version>
 			</dependency>
+			<!-- to fix CVE-2020-26217 -->
+			<dependency>
+				<groupId>com.thoughtworks.xstream</groupId>
+				<artifactId>xstream</artifactId>
+				<version>1.4.15</version>
+			</dependency>
 			<!--for test -->
 			<dependency>
 				<groupId>com.h2database</groupId>