a vulnerability CVE-2021-23382 is introduced in @coorpacademy/components

[ayaka-kms]

Hi, a vulnerability CVE-2021-23382 is introduced in @coorpacademy/components via:
● @coorpacademy/components@10.0.19 ➔ postcss-color-function@4.1.0 ➔ postcss@6.0.23

postcss-color-function is a legacy package. It has not been maintained for about 2 years, and is not likely to be updated.
Is it possible to migrate postcss-color-function to other package to remediate this vulnerability?

I noticed several migration records for postcss-color-function in other js repos, such as

1. in AdvisorySG/ghost-advisory-theme, Replace the obsolete postcss-color-function with postcss-color-mod-function via commit
2. in JBValo/bond, Replace the obsolete postcss-color-function with postcss-color-mod-function via
   commit
3. in cloudflare/cf-ui, replace postcss-color-function by polished via
   commit

Are there any efforts planned that would remediate this vulnerability or migrate postcss-color-function?

Thanks
; )