Description of the false positive

Uncontrolled format string - querystring - Why this is categorized as critical Severity ?

Code samples or links to source code

URL to the alert on GitHub code scanning (optional)