These are all security issues fixed in the python36-XStatic-jquery-ui-1.12.1.1-2.11 package on the GA media of openSUSE Tumbleweed.