How is open source software checked for security?

That varies per project. Control can come from maintainers, users, security researchers, audits, automatic scans and organizations that deploy the software.

Open source makes such control possible, but does not organize it by itself.