These are all security issues fixed in the jq-1.6-2.9 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "libjq1": "1.6-2.9", "jq": "1.6-2.9", "libjq-devel": "1.6-2.9" } ] }