Angular is part of Google Open Source Software Vulnerability Reward Program, for vulnerabilities in Angular please submit your report here.

For more information on Angular's security policy visit: https://angular.io/guide/security