These are all security issues fixed in the velocity-1.7-9.3 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "velocity-demo": "1.7-9.3", "velocity-javadoc": "1.7-9.3", "velocity-manual": "1.7-9.3", "velocity": "1.7-9.3" } ] }