diff --git a/cves/2021/CVE-2021-39146.yaml b/cves/2021/CVE-2021-39146.yaml
index 348ff62794..d0dfd1e047 100644
--- a/cves/2021/CVE-2021-39146.yaml
+++ b/cves/2021/CVE-2021-39146.yaml
@@ -96,6 +96,8 @@ requests:
         part: body
         words:
           - "timestamp"
+          - "com.thoughtworks.xstream"
+        condition: or
 
       - type: word
         part: header