All IPython and Jupyter related security are handled via [email protected]. You can find more information on the Jupyter website. https://jupyter.org/security
You can also report security concerns for the comm package via the Tidelift platform.