diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 9eb0f3a5d..0d7d4f80c 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -262,7 +262,7 @@ velocity-engine-core = { module = "org.apache.velocity:velocity-engine-core", ve
 velocity-tools-generic = { module = "org.apache.velocity.tools:velocity-tools-generic", version = "3.1" }
 xmpbox = { module = "org.apache.pdfbox:xmpbox", version.ref = "pdfbox" }
 xpp3 = { module = "xpp3:xpp3", version = "1.1.4c" }
-xstream = { module = "com.thoughtworks.xstream:xstream", version = "1.4.20" }
+xstream = { module = "com.thoughtworks.xstream:xstream", version = "1.4.21" }
 
 [bundles]
 client-main = [
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index a55f913c9..4ef2b8d70 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -719,11 +719,24 @@
             <sha256 value="73d81ece39e94a1d2d7fcd0184662aa3d4106bfe9709b793964892e3e7f4fdc4" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.thoughtworks.xstream" name="xstream" version="1.4.21">
+         <artifact name="xstream-1.4.21.jar">
+            <sha256 value="f56586f3de59ae2a49430acbc9f27942b8c5cebec9245c869fae7136733333ec" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="xstream-1.4.21.pom">
+            <sha256 value="d93157bd2952b4c4a9e10d915e28f297c2a219211054b43becdeb8207262767b" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.thoughtworks.xstream" name="xstream-parent" version="1.4.20">
          <artifact name="xstream-parent-1.4.20.pom">
             <sha256 value="111889e302165a0f44a54de4db705250d1de0dc91ba78a198a1d2278344beee7" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.thoughtworks.xstream" name="xstream-parent" version="1.4.21">
+         <artifact name="xstream-parent-1.4.21.pom">
+            <sha256 value="00157e30fc1dcfe5e6543e88cb8763db6dca566e52589ced852bbf798dacdde6" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.typesafe.netty" name="netty-reactive-streams" version="2.0.8">
          <artifact name="netty-reactive-streams-2.0.8.jar">
             <sha256 value="29a94424d32c1866eb1ebdc543b8f18bf91dd31aca81a45a99ff7a49f8709ef8" origin="Generated by Gradle"/>