If I have a request for updating a package that is contained in the "security" repo, how/where would I file this?

Concerning the nitrokey app there is a recent update to 2.1.1 with new functionalities available,as opposed to the current offer of 1.4.2 (which is BTW perfectly functional, but limited when it comes to the newer versions of the nitrokey (nitrokey pro3 etc), currently in the "security" repo. Nitrokey is the same hardware idea as yubikey (allowing gpg/otp and so on) just to make you understand what kind of software / hardware this is. In such a case, would I file a bugzilla request for this package, or is software of the security repo not supported via bugzilla? Just trying to avoid to create unintentionally some invalid request. Thank you.