Any vulns in any package in OpenBSD's package repositories that they audited should count as a vuln against OpenBSD itself.
If OpenBSD users installed it through OpenBSD repositories and are running it will they be affected? Yes? Then it counts against the system itself.