XStream高危漏洞

[chendx79]

现在最新版本1.9.1使用的XStream库还是1.4.17，存在下面的漏洞，建议升到最新的XStream库后再发一个Release。

漏洞级别：高危
漏洞名称：XStream < 1.4.18 多个远程代码执行漏洞 (CVE-2021-39139等)

修复方案：
升级XStream到当前最新版本1.4.18
下载地址：https://x-stream.github.io/download.html

[nobodyiam]

Thanks for the reminder, looks like the master branch has been updated, so we only need to update the 1.x branch.

[a67793581]

请问多久后会更新

[nobodyiam]

@a67793581 1.9.2 version is released.

[stale]

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

[stale]

This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.