Document OJSI-28 vulnerability