CVE probably won't do CVEs for these as they don't do backdoors/intentionally malicious code (but maybe they will, who knows). In any event the color.js issue

CVE probably won't do CVEs for these as they don't do backdoors/intentionally malicious code (but maybe they will, who knows). In any event the color.js issue is being tracked by the #GSD https://globalsecuritydatabase.org/ https://globalsecuritydatabase.org/ in GSD-2022-1000007 (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000007.json https://github.com/cloudsecurityalliance/gsd-database/blob/m...) and the faker.js issue in GSD-2022-1000008 (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000007.json https://github.com/cloudsecurityalliance/gsd-database/blob/m...), if you would like to add anything to it please submit a PR or file an issue against the file. Thanks.