two app studio Journey Vulnerabilities