The Debian OVAL feed lacks vulnerability severity data, which is very important for risk assessment. The JSON feed https://security-tracker.debian.org/tracker/data/json contains this information in the form of "urgency".

See https://security-team.debian.org/security_tracker.html#severity-levels for the meaning of each severity level recognized by Debian.