I'm don't see anything specifying 0.100.3 yet: <https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=clamav>.

ClamXAV user

On Aug 22, 2019, at 14:12, Chris Pollock via clamav-users <clamav-users@lists.clamav.net> wrote:
The most current version is ClamAV 0.100.3 for Ubuntu 18.04.3 LTS. Is
there a list of CVE's that I can reference in a bug report to try and
get ClamAV updated to the latest version?

Thank you