Each finding is assigned a severity level to assist with prioritization.
Severity reflects a combination of:
Potential impact
Context in which the pattern appears
Confidence in the analysis result
Severity is intended as a decision-support signal, not a definitive statement of exploitability.