diff --git a/pom.xml b/pom.xml
index f1880e0..cb70ea7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1067,6 +1067,10 @@
           <version>1.6.8</version>
           <dependencies>
             <dependency>
+              <!-- Until https://github.com/sonatype/nexus-public/pull/93 is resolved, please -->
+              <!-- install from https://github.com/kohlschuetter/nexus-public.git -->
+              <!-- git switch xstream-1.4.18-fix -->
+              <!-- cd components/nexus-client-core ; mvn clean install -Denforcer.skip=true -Dmaven.compiler.target=7 -Dmaven.compiler.source=7 -DskipTests=true -->
               <groupId>org.sonatype.nexus</groupId>
               <artifactId>nexus-client-core</artifactId>
               <version>2.14.21-02</version>
@@ -1074,7 +1078,7 @@
             <dependency>
               <groupId>com.thoughtworks.xstream</groupId>
               <artifactId>xstream</artifactId>
-              <version>1.4.17</version>
+              <version>1.4.18</version>
             </dependency>
             <dependency><!-- needed by xstream 1.4.16 -->
               <groupId>xpp3</groupId>