All IPython and Jupyter security are handled via security@ipython.org. You can find more information on the Jupyter website. https://uhm6mk8ruvv0aemmv4.julianrbryant.com/security
You can report security concerns for IPython via the Tidelift platform.