Please report (suspected) security vulnerabilities to johannes@joina.de with the subject "Security html-to-markdown" and you will receive a response within 48 hours.