There is an updated pull request by aurieh against master on the void-packages repository

https://github.com/aurieh/void-packages update-ampache
https://github.com/void-linux/void-packages/pull/25915

ampache: update to 4.2.3
Was tragically outdated with several CVEs to its name. This package is likely abandoned - I wouldn't mind taking ownership of it as I use the software myself.

A patch file from https://github.com/void-linux/void-packages/pull/25915.patch is attached