We take security very seriously at Weblate. We welcome any peer review of our 100% open source code to ensure nobody's Weblate is ever compromised or hacked.
You can find more information on reporting security issues in our documentation and on our page at HackerOne.