Merge "Document OJSI-202 (CVE-2019-12127) vulnerability"