Is RCE Really Just Low Severity?

A friendly case study of a command injection in fmt::say, how it was fixed, and how impact and exposure shape severity