Published: 2016/04/22 Last Updated: 2016/04/22

Information from Atom

Vulnerability ID:JVN#00324715
Title:Electron may insecurely load Node modules
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.

Atom, built on Electron has incorporated the version of Electron that addresses this
issue. Atom versions 1.2.0 and later include this fix.

The commit that updated the version of Electron in Atom is:

https://github.com/atom/atom/commit/bbf25e7da15e4759341ffad26299639a1cc788ab