Usually, the release team rejects such requests. You should isolate the CVE fixes as patches and add them as quilt patches to the 3.10.2-1 version resulting in a 3.10.2-1+deb13u1 trixie proposed update request. You can see example in the https://bugs.debian.org/release.debian.org bug tracker. If you want other bugfixes than security fixes, they should have an important bug report associated.
- Bug#1142507: cyrus-imapd: request to build v3.10.3 based ... Monsieur Me
- Bug#1142507: cyrus-imapd: request to build v3.10.3 b... Bastian Germann
- Bug#1142507: cyrus-imapd: request to build v3.10.3 b... Edmund Lodewijks
- Bug#1142507: cyrus-imapd: request to build v3.10.3 b... Monsieur Me

