diff --git a/pom.xml b/pom.xml
index 53f9fad8de..a29610d50d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -554,7 +554,7 @@
                 <artifactId>xstream</artifactId>
                 <!-- apparently this needs to be exactly this version to work with Java 17 -->
                 <!-- https://stackoverflow.com/a/70157413/6138465 -->
-                <version>1.4.15</version> 
+                <version>1.4.21</version> 
               </dependency>
             </dependencies>
             </plugin>