Upgrade to Xstream 1.4.11.1 due to reopening of vulnerability CVE-2013-7285

[ankurbhakta]

Looks like the old vulnerability in CVE-2013-7284 was not fully addressed by Xstream version 1.4.10. This old version is showing up in our vulnerability scans. Can we upgrade to the newer xstream version 1.4.11.1

Links to release notes/vulnerability fixes:
https://x-stream.github.io/changes.html

[mattnelson]

Another option is to completely remove xstream as proposed in #1074

[spencergibb]

I agree with @mattnelson #1074 would be the long term fix, this one being a quick easy fix.

[troshko111]

Thanks for the report @ankurbhakta and the PR @spencergibb, appreciate it. No emotional attachment to Xstream but we do not want to break anyone so any solution will need to be compatible.