constructor() initializer {} is generally enough to fully initialize the contract. If you want to initialize it manually separately you will need to omit that line.
The latest versions of OpenZeppelin Contracts are not vulnerable to this vulnerability.