An Ars commenter noted that the patch fixing a CVE that was originally rejected has now been accepted: https://arstechnica.com/information-technology/2023/07/almalinux-says-red-hat-source-changes-wont-kill-its-rhel-compatible-distro/?comments=1&post=42051274

Link to the patch being accepted: https://gitlab.com/redhat/centos-stream/rpms/iperf3/-/merge_requests/5#note_1481235739