{"id":"CLSA-2026-1784250511","summary":"TuxCare security update for com.thoughtworks.xstream (2 CVEs)","details":"TuxCare rebuilt 6 com.thoughtworks.xstream packages to address 2 CVEs. Fixed in 1.4.17-tuxcare.2.","modified":"2026-08-07T10:01:44.612457907Z","published":"2026-08-04T14:52:44Z","upstream":["CVE-2021-43859","CVE-2024-47072"],"affected":[{"package":{"name":"com.thoughtworks.xstream:xstream","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-benchmark","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-benchmark"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-distribution","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-distribution"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-hibernate","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-hibernate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-jmh","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-jmh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}},{"package":{"name":"com.thoughtworks.xstream:xstream-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.thoughtworks.xstream/xstream-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.17-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784250511.json"}}],"schema_version":"1.8.0"}