ISPN-4080 Upgrade to XStream 1.4.7 to fix a deserialization vulnerability