There's a closed pull request on the void-packages repository

csync2: add CVE-2019-15522 fix
https://github.com/void-linux/void-packages/pull/26308

Description:
Seems source doesn't exist anymore from homepage, so use github source