It looks like, the package is affected by the CVE above. libcue-2.2.1-10.fc37.x86_64 Reproducible: Always https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2601
Duplicate of bug 2242943. Fix has just been merged, builds are running now. Updates will go on linked ticket. *** This bug has been marked as a duplicate of bug 2242943 ***