update xstream to 1.4.15

apolloconfig · Jan 30, 2021 · 21ed9d1 · 21ed9d1
1 parent fbec10d
commit 21ed9d1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -293,6 +293,12 @@
 				<artifactId>commons-lang</artifactId>
 				<version>2.6</version>
 			</dependency>
+			<!-- to fix CVE-2020-26217 -->
+			<dependency>
+				<groupId>com.thoughtworks.xstream</groupId>
+				<artifactId>xstream</artifactId>
+				<version>1.4.15</version>
+			</dependency>
 			<!--for test -->
 			<dependency>
 				<groupId>com.h2database</groupId>