Merge "Document fixed OJSI-157 vulnerability"