d3-selection-multi package.json update - d3.js

I’m using d3-selection@3 and d3-transition@3 in my d3-custom package. I’m also using d3-selection-multi@1 package. But it’s dependency is d3-selection@1 and d3-transition@1 which cause reDoS vulnerability in d3-color Refer https://security.snyk.io/package/npm/d3-color. Is it possible to update the version in d3-selection-multi package.json and release a new version?