Vulnerability policy severities must not contain spaces