Add security-severity metadata

javascript/ql/src/Electron/AllowRunningInsecureContent.ql

@@ -3,9 +3,11 @@
  * @description Enabling allowRunningInsecureContent can allow remote code execution.
  * @kind problem
  * @problem.severity error
+ * @security-severity 5.9
  * @precision very-high
  * @tags security
  *       frameworks/electron
+ *       external/cwe/cwe-494
  * @id js/enabling-electron-insecure-content
  */
 

javascript/ql/src/Electron/DisablingWebSecurity.ql

@@ -3,9 +3,11 @@
  * @description Disabling webSecurity can cause critical security vulnerabilities.
  * @kind problem
  * @problem.severity error
+ * @security-severity 2.9
  * @precision very-high
  * @tags security
  *       frameworks/electron
+ *       external/cwe/cwe-79
  * @id js/disabling-electron-websecurity
  */
 

javascript/ql/src/Electron/EnablingNodeIntegration.ql

@@ -3,6 +3,7 @@
  * @description Enabling `nodeIntegration` or `nodeIntegrationInWorker` can expose the application to remote code execution.
  * @kind problem
  * @problem.severity warning
+ * @security-severity 10.0
  * @precision low
  * @id js/enabling-electron-renderer-node-integration
  * @tags security