These are all security issues fixed in the libcoap-devel-4.3.5a-1.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "libcoap-utils": "4.3.5a-1.1", "libcoap3-3": "4.3.5a-1.1", "libcoap-devel": "4.3.5a-1.1" } ] }