Merge "Document OJSI-99 vulnerability"