Affected versions of fresh are vulnerable to regular expression denial of service when parsing specially crafted user input.

Update to version 0.5.2 or later.