fix: account for severity flag in fail-on-severity logic

fix: account for severity flag in fail-on-severity logic #3803