Severity is based on impact. What was the impact here beyond single container and that specific user instance? Feels like moderate was okay, or even too high.