This cve was fixed in the 1.23.1 release. While there is brief information about the issue in the release notes for 1.23.1 and in issue #2645, we do not have an entry under https://docs.pagure.org/koji/CVEs/CVEs/
Also, the mitre record still shows as RESERVED. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15856
Metadata Update from @tkopecek: - Custom field Size adjusted to None - Issue set to the milestone: 1.24.1
PR #2717
Commit 9a233682 fixes this issue
Commit dc18c7e8 fixes this issue
Metadata Update from @jcupova: - Issue tagged with: no_qe
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/koji/koji/issues/2707
Please continue any further discussion there.