Code review comment for ~emitorino/ubuntu-cve-tracker:detect_priority_mismatch

Thanks for this @emitorino - I wonder if we should put some of this logic into cve_lib itself (or perhaps some other "common" library) so that it can be shared with check-syntax since ideally we would have check-syntax enforce this check as well. Thoughts?