x-stream/xstream issues and pull requests

#362 - Warning of use of Unsafe in JDK 23

Issue - State: open - Opened by Thihup 9 days ago

#361 - info required for compatible version with openjdk21

Issue - State: open - Opened by sahil3390 20 days ago - 1 comment

#360 - xstream 1.4.4 moving from Oracle Java 1.8 to OpenJDK 1.8

Issue - State: closed - Opened by vinoth78 2 months ago - 1 comment
Labels: help wanted

#359 - Posting/verifying signing keys used for artifacts in Maven Central?

Issue - State: closed - Opened by scantor 3 months ago - 2 comments
Labels: improvement

#358 - Alias using serialization proxy pattern ?

Issue - State: closed - Opened by jjazzboss 4 months ago - 2 comments
Labels: question

#357 - CustomObjectInputStream's readInt throws a cast error if the read data is a Byte.

Issue - State: open - Opened by thxwelchs 5 months ago - 6 comments
Labels: question

#356 - Deserializing large files is slow on low-performance devices

Issue - State: open - Opened by Ssmalllucky 7 months ago - 1 comment
Labels: invalid

#355 - When will 1.5 released with hibernate 6 support?

Issue - State: open - Opened by ankitbardiyasapiens 7 months ago - 6 comments
Labels: help wanted

#354 - The vulnerabilities database NVD only finds xstream component with VENDOR= xstream_project

Issue - State: open - Opened by joseluiswork 8 months ago - 1 comment

#353 - Problem of TreeSet/TreeMap

Issue - State: closed - Opened by urn1ce 8 months ago - 4 comments
Labels: question

#352 - Maven errors with java 21

Issue - State: closed - Opened by nobody102 8 months ago - 1 comment
Labels: question

#351 - RecordConverter: Do not throw ClassNotFoundException when "class" attribute is absent

Pull Request - State: open - Opened by toby1984 9 months ago

#350 - Memory allocation optimizations

Pull Request - State: open - Opened by VladRassokhin 9 months ago

#349 - Make Types#isLambdaType work on JDK >= 21

Pull Request - State: open - Opened by toby1984 9 months ago - 4 comments
Labels: improvement

#348 - Avoid SimpleDateFormat

Issue - State: open - Opened by tristantarrant 9 months ago
Labels: improvement

#347 - com.thoughtworks.xstream.core.util is not exported in OSGI manifest

Issue - State: open - Opened by laeubi 9 months ago - 2 comments
Labels: question

#346 - Support for Hibernate6 collection

Pull Request - State: open - Opened by luczus 10 months ago
Labels: enhancement

#345 - Support Record Classes

Issue - State: closed - Opened by jpink 10 months ago - 1 comment
Labels: duplicate

#344 - Is there any annotations can support both attribute and sub tags

Issue - State: closed - Opened by seiyafei 10 months ago - 1 comment
Labels: question

#343 - B

Issue - State: closed - Opened by Ercu84 10 months ago

#342 - DomReader: slow performance $O(n^2)$ when deserialize on millions of elements to list

Issue - State: closed - Opened by morris821028 12 months ago - 3 comments
Labels: improvement

#341 - how both text and sub tags exist

Issue - State: closed - Opened by lixun027 about 1 year ago - 3 comments
Labels: question

#340 - Unmodifiable Lists converter

Issue - State: open - Opened by adjiandov about 1 year ago - 1 comment
Labels: enhancement

#339 - How to set byte array not to do conversion？Thanks.

Issue - State: closed - Opened by fenggeZhang about 1 year ago - 1 comment
Labels: question

#338 - how to parse xml string into class with genericity

Issue - State: closed - Opened by kiritokun07 about 1 year ago - 3 comments
Labels: question

#337 - `PrettyPrintWriter` fails to serialize characters in the Unicode Supplementary Multilingual Plane in XML 1.0 mode and XML 1.1 mode

Pull Request - State: open - Opened by basil about 1 year ago - 3 comments

#336 - `PrettyPrintWriter` cannot write emoji in XML 1.1 mode

Issue - State: open - Opened by jglick about 1 year ago - 1 comment
Labels: bug

#335 - Allow `PrettyPrintWriter` to replace invalid XML characters when not running in quirks mode

Pull Request - State: closed - Opened by basil about 1 year ago - 1 comment
Labels: enhancement

#334 - QuickWriter: Fix remaining buffer size estimation

Pull Request - State: closed - Opened by y-higuchi about 1 year ago - 1 comment
Labels: bug

#333 - how to remove the class attribute when serializing Java Bean to xml?

Issue - State: closed - Opened by cmanlh about 1 year ago - 1 comment
Labels: question

#332 - XStreamOmitField default value

Issue - State: closed - Opened by quantrpeter about 1 year ago - 1 comment
Labels: question

#331 - Fix AtomicReference marshalling. Closes #326

Pull Request - State: closed - Opened by ablekhman over 1 year ago - 3 comments
Labels: bug

#330 - Fix AtomicReference marshalling. Closes #326

Pull Request - State: closed - Opened by ablekhman over 1 year ago - 1 comment

#329 - Convert in mother class won't work

Issue - State: closed - Opened by quantrpeter over 1 year ago - 2 comments
Labels: question

#328 - unable to deserialize to object

Issue - State: closed - Opened by quantrpeter over 1 year ago - 2 comments
Labels: question

#328 - unable to deserialize to object

Issue - State: closed - Opened by quantrpeter over 1 year ago - 2 comments
Labels: question

#327 - Illegal reflective access by com.thoughtworks.xstream.converters.reflection.FieldDictionary

Issue - State: closed - Opened by elavy-harris over 1 year ago - 1 comment
Labels: duplicate

#326 - Using xStream_1_4_20, Not able to convert AtomicReference atomicRef = new AtomicReference(); with default value. It is giving NullpointerException.

Issue - State: closed - Opened by ajaysharma2 over 1 year ago - 1 comment
Labels: bug

#325 - Any plans to support GraalVM Native Image?

Issue - State: open - Opened by wangliang181230 over 1 year ago - 4 comments

#324 - Some classes support `native-image`

Pull Request - State: closed - Opened by wangliang181230 over 1 year ago

#323 - The class `SerializationMembers` can not be used in `native-image`.

Issue - State: closed - Opened by wangliang181230 over 1 year ago

#323 - The class `SerializationMembers` can not be used in `native-image`.

Issue - State: open - Opened by wangliang181230 over 1 year ago

#322 - Usegithubactions

Pull Request - State: closed - Opened by carstenartur over 1 year ago - 1 comment

#321 - Make use of github actions

Pull Request - State: closed - Opened by carstenartur over 1 year ago

#321 - Make use of github actions

Pull Request - State: closed - Opened by carstenartur over 1 year ago

#320 - We have requested that one will remain for woodstox (CVE-2022-40152), and that the duplicates (CVE-2022-40153, CVE-2022-40154, CVE-2022-40155 and CVE-2022-40156) will be deleted. Those using Woodstox in Xstream have DTD support enabled by default, at least that's the way how the vulnerability in woodstox was found, see [Xstream fuzz target](https://github.com/google/oss-fuzz/blob/master/projects/xstream/XmlFuzzer.java).

Issue - State: closed - Opened by dockter34 over 1 year ago - 1 comment
Labels: notification

#320 - We have requested that one will remain for woodstox (CVE-2022-40152), and that the duplicates (CVE-2022-40153, CVE-2022-40154, CVE-2022-40155 and CVE-2022-40156) will be deleted. Those using Woodstox in Xstream have DTD support enabled by default, at least that's the way how the vulnerability in woodstox was found, see [Xstream fuzz target](https://github.com/google/oss-fuzz/blob/master/projects/xstream/XmlFuzzer.java).

Issue - State: closed - Opened by dockter34 over 1 year ago
Labels: notification

#319 - XStream Core latest version 1.4.19 is vulnerable

Issue - State: closed - Opened by ncteam1990 over 1 year ago - 1 comment
Labels: duplicate

#319 - XStream Core latest version 1.4.19 is vulnerable

Issue - State: closed - Opened by ncteam1990 over 1 year ago - 1 comment
Labels: duplicate

#319 - XStream Core latest version 1.4.19 is vulnerable

Issue - State: closed - Opened by ncteam1990 over 1 year ago - 1 comment
Labels: duplicate

#318 - Unable to serialize Oracle DB objects using xstream

Issue - State: closed - Opened by Sarthak160 over 1 year ago - 3 comments
Labels: question

#317 - Upgrade to woodstox 5.4.0 due to CVE-2022-40152

Pull Request - State: closed - Opened by pjfanning over 1 year ago - 2 comments
Labels: improvement

#317 - Upgrade to woodstox 5.4.0 due to CVE-2022-40152

Pull Request - State: closed - Opened by pjfanning over 1 year ago - 2 comments
Labels: improvement

#316 - [CVE-2022-40151] Fix `StackOverflowError`

Pull Request - State: closed - Opened by basil over 1 year ago - 6 comments
Labels: bug

#316 - [CVE-2022-40151] Fix `StackOverflowError`

Pull Request - State: closed - Opened by basil over 1 year ago - 6 comments
Labels: bug

#315 - XStream cant`t support Inherit JavaBean

Issue - State: closed - Opened by gengzhy over 1 year ago

#315 - XStream cant`t support Inherit JavaBean

Issue - State: closed - Opened by gengzhy over 1 year ago

#315 - XStream cant`t support Inherit JavaBean

Issue - State: closed - Opened by gengzhy over 1 year ago

#314 - Stackoverflow CVE-2022-40151

Issue - State: closed - Opened by henryrneh over 1 year ago - 6 comments
Labels: bug

#314 - Stackoverflow CVE-2022-40151

Issue - State: closed - Opened by henryrneh over 1 year ago - 6 comments
Labels: bug

#313 - Feature request: Add reader support to JsonHierarchicalStreamDriver

Issue - State: open - Opened by mattrpav over 1 year ago
Labels: enhancement

#313 - Feature request: Add reader support to JsonHierarchicalStreamDriver

Issue - State: open - Opened by mattrpav over 1 year ago
Labels: enhancement

#313 - Feature request: Add reader support to JsonHierarchicalStreamDriver

Issue - State: open - Opened by mattrpav over 1 year ago
Labels: enhancement

#312 - Potential performance improvements to FieldDictionary from 2015 still not released

Issue - State: closed - Opened by mdealer almost 2 years ago - 1 comment
Labels: question

#312 - Potential performance improvements to FieldDictionary from 2015 still not released

Issue - State: closed - Opened by mdealer almost 2 years ago - 1 comment
Labels: question

#312 - Potential performance improvements to FieldDictionary from 2015 still not released

Issue - State: closed - Opened by mdealer almost 2 years ago - 1 comment
Labels: question

#311 - What is the trigger condition of CVE-2022-40156 CVE-2022-40153 CVE-2022-40154 CVE-2022-40155, XStream. fromXML? Is the version affected only when XStream.fromXML is called?

Issue - State: closed - Opened by BadTrasher almost 2 years ago - 8 comments
Labels: duplicate

#311 - What is the trigger condition of CVE-2022-40156 CVE-2022-40153 CVE-2022-40154 CVE-2022-40155, XStream. fromXML? Is the version affected only when XStream.fromXML is called?

Issue - State: closed - Opened by BadTrasher almost 2 years ago - 8 comments
Labels: duplicate

#311 - What is the trigger condition of CVE-2022-40156 CVE-2022-40153 CVE-2022-40154 CVE-2022-40155, XStream. fromXML? Is the version affected only when XStream.fromXML is called?

Issue - State: closed - Opened by BadTrasher almost 2 years ago - 8 comments
Labels: duplicate

#310 - 1.4.19 Vulnerable to DoS

Issue - State: closed - Opened by rabeltra almost 2 years ago - 1 comment
Labels: duplicate

#310 - 1.4.19 Vulnerable to DoS

Issue - State: closed - Opened by rabeltra almost 2 years ago - 1 comment
Labels: duplicate

#310 - 1.4.19 Vulnerable to DoS

Issue - State: closed - Opened by rabeltra almost 2 years ago - 1 comment
Labels: duplicate

#309 - Unable to serialize `AtomicBoolean` on Java 17

Pull Request - State: closed - Opened by basil almost 2 years ago - 2 comments

#309 - Unable to serialize `AtomicBoolean` on Java 17

Pull Request - State: closed - Opened by basil almost 2 years ago - 2 comments

#308 - Unable to serialize `AtomicBoolean` on Java 17

Issue - State: closed - Opened by basil almost 2 years ago - 2 comments
Labels: enhancement

#308 - Unable to serialize `AtomicBoolean` on Java 17

Issue - State: closed - Opened by basil almost 2 years ago - 2 comments
Labels: enhancement

#307 - New version published

Issue - State: closed - Opened by punkdis almost 2 years ago - 3 comments
Labels: question

#307 - New version published

Issue - State: closed - Opened by punkdis almost 2 years ago - 3 comments
Labels: question

#307 - New version published

Issue - State: closed - Opened by punkdis almost 2 years ago - 3 comments
Labels: question

#306 - alias collection type

Issue - State: closed - Opened by adjiandov almost 2 years ago - 1 comment
Labels: question

#306 - alias collection type

Issue - State: closed - Opened by adjiandov almost 2 years ago - 1 comment
Labels: question

#305 - Versión 1.4.19 que rompe JMapper con com.thoughtworks.xstream.security.ForbiddenClassException: com.googlecode.jmapper.xml.beans.XmlJmapper

Issue - State: closed - Opened by luismora1224 almost 2 years ago - 1 comment
Labels: duplicate

#305 - Versión 1.4.19 que rompe JMapper con com.thoughtworks.xstream.security.ForbiddenClassException: com.googlecode.jmapper.xml.beans.XmlJmapper

Issue - State: closed - Opened by luismora1224 almost 2 years ago - 1 comment
Labels: duplicate

#304 - New OSS-Fuzz Findings in xstream

Issue - State: closed - Opened by henryrneh almost 2 years ago - 45 comments
Labels: bug

#304 - New OSS-Fuzz Findings in xstream

Issue - State: closed - Opened by henryrneh almost 2 years ago - 45 comments
Labels: bug

#303 - Collection Objects Into Another Format For XML

Issue - State: closed - Opened by Sheldon66-Huang almost 2 years ago - 8 comments
Labels: enhancement

#303 - Collection Objects Into Another Format For XML

Issue - State: closed - Opened by Sheldon66-Huang almost 2 years ago - 8 comments
Labels: enhancement

#302 - ForbiddenClassException and how to avoid it ?

Issue - State: closed - Opened by Shikari0744 almost 2 years ago - 3 comments
Labels: question

#301 - how to use Xstream convert from XML to javabean

Issue - State: closed - Opened by better-kay almost 2 years ago - 3 comments
Labels: question

#301 - how to use Xstream convert from XML to javabean

Issue - State: closed - Opened by better-kay almost 2 years ago - 3 comments
Labels: question

#300 - how to use Xstream convert to xml

Issue - State: closed - Opened by better-kay almost 2 years ago - 1 comment
Labels: duplicate

#300 - how to use Xstream convert to xml

Issue - State: closed - Opened by better-kay almost 2 years ago - 1 comment
Labels: duplicate

#299 - Sonarqube Fixes

Pull Request - State: open - Opened by gorky almost 2 years ago - 1 comment

#299 - Sonarqube Fixes

Pull Request - State: open - Opened by gorky almost 2 years ago - 1 comment

#298 - Sonarqube Fixes

Issue - State: open - Opened by gorky almost 2 years ago

#297 - Sonarqube Fixes #296

Pull Request - State: closed - Opened by gorky about 2 years ago - 1 comment
Labels: improvement

#297 - Sonarqube Fixes #296

Pull Request - State: closed - Opened by gorky about 2 years ago - 1 comment
Labels: improvement

#297 - Sonarqube Fixes #296

Pull Request - State: closed - Opened by gorky about 2 years ago - 1 comment
Labels: improvement

#296 - Sonarqube Fixes

Issue - State: closed - Opened by gorky about 2 years ago
Labels: improvement

#296 - Sonarqube Fixes

Issue - State: closed - Opened by gorky about 2 years ago
Labels: improvement

GitHub / x-stream/xstream issues and pull requests