Masonite is developed with application security in mind. When a release is getting ready, it will be reviewed for any possible security vulnerabilities by a maintainer. Masonite also makes use of services such as DeepSource which will scan each pull request for possible security vulnerabilities, code smells, possible bugs, and other code issues.
It would be foolish to think all security vulnerabilities will never make it into the codebase, though, especially because of the fact that new ways to attack an application can be ...