{"id":"CLSA-2026-1783645396","summary":"TuxCare security update for com.thoughtworks.xstream (15 CVEs)","details":"TuxCare rebuilt 6 com.thoughtworks.xstream packages to address 15 CVEs. Fixed in 1.4.17-tuxcare.1.","modified":"2026-08-07T10:01:38.116401109Z","published":"2026-08-04T14:52:43Z","upstream":["CVE-2021-39139","CVE-2021-39140","CVE-2021-39141","CVE-2021-39144","CVE-2021-39145","CVE-2021-39146","CVE-2021-39147","CVE-2021-39148","CVE-2021-39149","CVE-2021-39150","CVE-2021-39151","CVE-2021-39152","CVE-2021-39153","CVE-2021-39154","CVE-2022-41966"],"affected":[{"package":{"name":"com.thoughtworks.xstream:xstream","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-benchmark","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-benchmark"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-distribution","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-distribution"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-hibernate","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-hibernate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-jmh","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-jmh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645396.json"}}],"schema_version":"1.8.0"}