CVE-2022-40151 because of XStream

Hi,

The XStream dependency is vulnerable to CVE-2022-40151 (see xstream issue #304 on github) and the project seems pretty dead since the disclosure, so noone seems onto fixing it...

if this security risk was to remain untreated, could you possibly consider switching to an alternative API/lib like for exemple XMLInputFactory from StAX parser which is the standard javareference implementation ?

Thank you very much.

Regards,

Y. Savanier