Affected versions are 1.3.x only. Package cacti is not affected in any openSUSE codestream. Therefore, I will be closing the bug.