Eureka Client - CVE-2024-47072 (HIGH severity)

[!Warning] This issue is solved in branch 2.x but it's not included in the latest release. I'd like to know if a release is planeed soon.

Vulnerability

CVE-2024-47072: DDOS attack exposure.

Dependency

<dependency>
  <groupId>com.thoughtworks.xstream</groupId>
  <artifactId>xstream</artifactId>
</dependency>

Fix-up

Update com.thoughtworks.xstream:xstream to version 1.4.21

<dependency>
    <groupId>com.thoughtworks.xstream</groupId>
    <artifactId>xstream</artifactId>
    <version>1.4.21</version>
</dependency>