Angular is part of Google Open Source Software Vulnerability Reward Program, for vulnerabilities in Angular please submit your report here. For more information on Angular's security policy visit: https://angular.io/guide/security