---
title: "fresh security advisories"
description: "1 known security advisory for fresh, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/fresh/security
lang: en
---

[Packages](https://inlinr.com/packages)

# fresh

0.5.2 · 14 Sep 2017 MIT 202.3M / week [Repository](https://github.com/jshttp/fresh) [Homepage](https://github.com/jshttp/fresh#readme) [npm](https://www.npmjs.com/package/fresh) [Atom feed](https://inlinr.com/packages/feed/fresh)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                           |
| ---- | ------ | ------------------------------------------------------------------------- |
|      | 2.0.0  | No known advisory                                                         |
|      | 0.5.2  | 5 open advisories, worst high  · last release Sep 2017, no longer updated |

- High  
[Regular Expression Denial of Service in fresh](https://inlinr.com/advisories/GHSA-9qj9-36jm-prpv)GHSA-9qj9-36jm-prpv · 24 Jul 2018  
fixed in 0.5.2

### Quality and security signals

What [npm](https://www.npmjs.com/package/fresh) and [deps.dev](https://deps.dev/npm/fresh) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Reading releases, release notes and advisories…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.