Skip to content
OpenAdvisories
High DLA-2704-1 1 CVE

libxstream-java - security update

Published Jul 5, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 libxstream-java 1.4.11.1-1+deb9u3

Vulnerabilities 1

  • High 7.5
    CVE-2021-29505 Public exploit Scanner template EPSS 77%

    XStream is vulnerable to a Remote Command Execution attack

    XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No u…

    x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven