JSST security advisory