These are all security issues fixed in the apache-commons-beanutils-1.9.4-3.7 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "apache-commons-beanutils-javadoc": "1.9.4-3.7", "apache-commons-beanutils": "1.9.4-3.7" } ] }