Please report (suspected) security vulnerabilities to [email protected] with the subject "Security html-to-markdown" and you will receive a response within 48 hours.