Hello! We found a vulnerable dependency in your project. Are you aware of it?

[HelloMavenEco]

Hi! We spot a vulnerable dependency in your project, which might threaten your software.
And we found that the vulnerable function of this CVE can be easily accessed from your software.

• CVE_ID: CVE-2019-10173
• Vulnerable dependency: com.thoughtworks.xstream:xstream
• Your invocation path to the vulnerable method:

de.micromata.genome.chronos.spi.jdbc.SerializationUtil:<clinit>()
⬇️
com.thoughtworks.xstream.XStream:<init>(com.thoughtworks.xstream.io.HierarchicalStreamDriver)
⬇️
......
⬇️
com.thoughtworks.xstream.XStream:setupSecurity()

Therefore, maybe you need to upgrade this dependency. Hope this can help you! 😄