Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15899.json"