From 5cc2e22265823ef20c8d508920a786c60badc893 Mon Sep 17 00:00:00 2001
From: "mend-for-github-com[bot]"
 <50673670+mend-for-github-com[bot]@users.noreply.github.com>
Date: Tue, 26 May 2026 11:32:22 +0000
Subject: [PATCH] Update dependency com.thoughtworks.xstream:xstream to v1.4.21

---
 webgoat-lessons/vulnerable-components/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webgoat-lessons/vulnerable-components/pom.xml b/webgoat-lessons/vulnerable-components/pom.xml
index f16525506..eccbc117f 100644
--- a/webgoat-lessons/vulnerable-components/pom.xml
+++ b/webgoat-lessons/vulnerable-components/pom.xml
@@ -12,7 +12,7 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <version>1.4.5</version> <!-- do not update necessary for lesson -->
+            <version>1.4.21</version> <!-- do not update necessary for lesson -->
         </dependency>
         <dependency>
             <groupId>cglib</groupId>