All IPython and Jupyter related security are handled via security@ipython.org. You can find more information on the Jupyter website. https://jupyter.org/security
You can also report security concerns for the comm
package via the Tidelift platform.