updateinfo: try to get CVEs and CVSS metrics for security errata
updateinfo: fix that js tempaltes rendered to wrong destination