[medium] Unwrapped Option in Notification Processing
[high] Race condition in notification loading
[high] Missing error handling for database operations in notifications listing
[medium] Complex boolean expression in notification filtering
[medium] Complex boolean expression in severity parsing
[high] Off-by-one error in CVSS severity thresholds
[medium] Inconsistent error handling with unwrap() in critical path
[medium] Incorrect handling of empty known_vulnerabilities in SBOM entry updates
[medium] Potential panic from unwrap_or_else() in notification creation
[medium] Missing error propagation in database index creation
[high] Missing error handling for HTTP request failures
[high] Server-Side Request Forgery (SSRF) via User-Controlled URL
[medium] Complex boolean expressions in error handling
[medium] Deeply nested control flow in notification rendering
[medium] Complex boolean expression in notification dismissal
[high] Incorrect notification dismissal logic
[medium] Inconsistent Error Handling in Resource Polling
[high] Potential XSS vulnerability in notification CVE ID rendering