The current version of devel/subversion in 2017Q3 is 1.9.5, which has a vulnerability. The vulnerability was fixed in 1.9.7, which is in head, but was not MFHed to the 2017Q3 branch.
Sorry this wasn't done. The 2017Q4 branch exists now. So I guess this is no longer needed.