Set up a hosted yum repository in Nexus Repo 3.16.0 with "repodata depth" of "1".
Deploy rpm files to it under two separate directories, such as:
Now download the primary.xml.gz file from the "tools/repodata" directory. You'll find that it contains all of the rpm files.
Expected: Only rpm files in the same tree as the "repodata" directory should be included in its metadata.
I also tested on 3.11.0, and this bug does not occur in that version.