Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.
Created nodejs-fresh tracking bugs for this issue:
Affects: epel-all [bug 1588782]
Affects: fedora-all [bug 1588781]