Zaino is not yet ready for use software. As far as I know, not a single team has switched to Zaino. In that case, I do not consider it at all appropriate to talk about identifying bugs of varying degrees of seriousness, except for the most serious ones, which may affect the operation of the higher-level infrastructure.
Quote from the program terms and conditions:
" * Supporting Infrastructure — Zallet, Zaino, and lightwalletd. Findings are capped at High, since defects in these repositories cannot by themselves directly break a core tenet at scale."