Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition. External references: https://nodesecurity.io/advisories/526
Created nodejs-fresh tracking bugs for this issue: Affects: epel-all [bug 1588782] Affects: fedora-all [bug 1588781]