Comment by zephod

Let's be clear - this affects client-side apps which include the template compiler (ie. the full vue.js bundle). Right? So apps built with Webpack, and using vue.runtime.min.js should be safe?

I'd imagine that represents the majority of Vue apps in production, but I might be wrong.