Suse Susestudio-ui-server vulnerabilities

• suse studio onsite, susestudio-ui-server +1 more SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite CVE-2017-14807 8.1 HighJanuary 27, 2020
• suse studio onsite, susestudio-ui-server +1 more Insecure handling of repodata and packages in SUSE Studio onlite CVE-2017-14806 3.7 LowJanuary 27, 2020