A single wrong severity label can push a bad dependency upgrade into production. An advisory said "moderate. " The package in our tree was critical.
Source: [Dev.to](https://dev.to/gitlab_3188/a-free-model-vs-30-security-advisory-records-an-accuracy-test-you-can-rerun-67h)