diff --git a/cves/2021/CVE-2021-39141.yaml b/cves/2021/CVE-2021-39141.yaml
index aa70c15abb..ba78c55ee7 100644
--- a/cves/2021/CVE-2021-39141.yaml
+++ b/cves/2021/CVE-2021-39141.yaml
@@ -209,6 +209,8 @@ requests:
         part: body
         words:
           - "timestamp"
+          - "com.thoughtworks.xstream"
+        condition: or
 
       - type: word
         part: header