Wrong CVSS3 V3.1 QR "MODERATE"

[mnonnenmacher]

GitHub advisories provide the severity "MODERATE" and as a result VulnerableCode does also provide this severity which according to the specification should be "MEDIUM" instead.

For example, this severity is classified as "MODERATE" by GitHub:
GHSA-c7mc-q43h-5672

It is reported by VulnerableCode as:

{
  "reference_url": "https://github.com/advisories/GHSA-c7mc-q43h-5672",
  "reference_id": "GHSA-c7mc-q43h-5672",
  "scores": [
    {
      "value": "MODERATE",
      "scoring_system": "cvssv3.1_qr",
      "scoring_elements": ""
    }
  ],
  "url": "https://github.com/advisories/GHSA-c7mc-q43h-5672"
}

It would be good if VulnerableCode could map "MODERATE" to the correct "MEDIUM" in its API response.

[sschuberth]

I've also reported this upstream to GitHub: github/advisory-database#2189