diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index b54311b38..1ba683e49 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -213,7 +213,7 @@ velocity-engine-core = { module = "org.apache.velocity:velocity-engine-core", ve
 velocity-tools-generic = { module = "org.apache.velocity.tools:velocity-tools-generic", version = "3.1" }
 xmpbox = { module = "org.apache.pdfbox:xmpbox", version = "2.0.24" }
 xpp3 = { module = "xpp3:xpp3", version = "1.1.4c" }
-xstream = { module = "com.thoughtworks.xstream:xstream", version = "1.4.20" }
+xstream = { module = "com.thoughtworks.xstream:xstream", version = "1.4.21" }
 jsch = { module = "com.github.mwiede:jsch", version = "2.27.7" }
 postgresql = { module = "org.postgresql:postgresql", version = "42.7.12" }
 snakeyaml = { module = "org.yaml:snakeyaml", version = "2.5" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 5660a74f1..4582e7e49 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -771,11 +771,24 @@
             <sha256 value="73d81ece39e94a1d2d7fcd0184662aa3d4106bfe9709b793964892e3e7f4fdc4" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.thoughtworks.xstream" name="xstream" version="1.4.21">
+         <artifact name="xstream-1.4.21.jar">
+            <sha256 value="f56586f3de59ae2a49430acbc9f27942b8c5cebec9245c869fae7136733333ec" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="xstream-1.4.21.pom">
+            <sha256 value="d93157bd2952b4c4a9e10d915e28f297c2a219211054b43becdeb8207262767b" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.thoughtworks.xstream" name="xstream-parent" version="1.4.20">
          <artifact name="xstream-parent-1.4.20.pom">
             <sha256 value="111889e302165a0f44a54de4db705250d1de0dc91ba78a198a1d2278344beee7" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.thoughtworks.xstream" name="xstream-parent" version="1.4.21">
+         <artifact name="xstream-parent-1.4.21.pom">
+            <sha256 value="00157e30fc1dcfe5e6543e88cb8763db6dca566e52589ced852bbf798dacdde6" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.typesafe.netty" name="netty-reactive-streams" version="2.0.8">
          <artifact name="netty-reactive-streams-2.0.8.jar">
             <sha256 value="29a94424d32c1866eb1ebdc543b8f18bf91dd31aca81a45a99ff7a49f8709ef8" origin="Generated by Gradle"/>