[Security] Bump markdown2 from 2.3.5 to 2.3.6