In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41040.json"