These are all security issues fixed in the flatpak-0.6.14-1.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "flatpak-devel": "0.6.14-1.1", "typelib-1_0-Flatpak-1_0": "0.6.14-1.1", "libflatpak0": "0.6.14-1.1", "flatpak-builder": "0.6.14-1.1", "flatpak": "0.6.14-1.1" } ] }