fix(vuln): fall back to UNKNOWN severity when vulnerability details are missing (#10795)