High DLA-2471-1 1 CVE

libxstream-java - security update

Published Nov 30, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	libxstream-java	1.4.9-2+deb9u1

Vulnerabilities 1

High 8.0

CVE-2020-26217 Public exploit Scanner template EPSS 85%

Remote Code Execution in XStream

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XS…

x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven

Nov 16, 2020