Document fixed OJSI-128 vulnerability