xstream version less than 1.4.16 is vulnerable, need to update xstream version to 1.4.16 

Link to the issue: https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4
This issue blacklisting build-info-extractor-gradle package with security checks in place.