security vulnerability in colors@1.4.1 and colors@1.4.44-liberty

[mannyluvstacos]

Describe the bug
A Security Vuln was identified in the Colors package for >1.4.0, offending packages being 1.4.1, 1.4.44-liberty

• source1
• source2
• source3

[jan-molak]

I've added more details and suggested potential fixes in #1885