"affected_versions">Affected Versions</h2>
    
    <p>All versions until and including version 1.4.17 are affected, if using the version out of the box.  No user is
    affected, who followed the recommendation to setup <a href="security.html#framework">XStream's security framework
    </a> with a whitelist limited to the minimal required    types.</p>

    <h2 id="description">Description</h2>
    
    <p>The processed stream at unmarshalling time contains type information to recreate the formerly written