High security issue in angular-js

I'm submitting a ...
bug report

Current behavior:
High security issue(s) found in angularjs sources used, reported by HP-Fortify scan tool.

Expected / new behavior:
No Critical/Blocker/High security issues to be reported when sources scanned for security review.

Minimal reproduction of the problem with instructions:
Scan the sources of angularjs using HP-Fortify or any other static code review tools for security issues. angular-scenario.js is reported to have insecure random issues and hard coded password issues.

Angular version:
1.6.2

Browser:
all

Anything else:

[frederikprijck]

I'd say the error linked to 2107 is a false positive as HPE Fortify will look for anything that looks like password: **, but this is not storing a password (password: true) hence not a security risk.

Looking at the source code, the other two don't look "high security" issues either. But maybe @gkalpak has a better idea about the impact/risk of that code.

[Narretz]

angular-scenario is an e2e test library. It's also deprecated (in favor of protractor). I don't think these are security issues.

[gkalpak]

In addition to what @Narretz said these warnings are coming from jQuery's code (which angular-scenario.js contains - from here, here and here) and are not actual vulnerabilities.

You can find several relevant discussions online, e.g. here and here. Quoting from the last one:

It is important to audit all findings identified by Fortify to determine if they pose a risk to the application, including those in third party libraries like jQuery. [...]

Closing since this is not actonable.