Vulnerability record: CVE-2020-26217 in x-stream/xstream (version 1.4.14-java7)
Weakness: CWE-078 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
GitHub Security Advisory: GHSA-mw36-7c6c-q4q2
Repository: https://github.com/x-stream/xstream
Buggy commit: d03f6987b793fac71ab89a31d7aa633c366c5289
Fix commit(s): 0fec095d534126931c99fd38e9c6d41f5c685c1a