These are all security issues fixed in the rxvt-unicode-9.26-3.3 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "rxvt-unicode": "9.26-3.3" } ] }