diff --git a/package-lock.json b/package-lock.json
index 0aa2776a..e8779f02 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@nextcloud/l10n": "^3.4.1",
         "@nextcloud/router": "^3.1.0",
         "@nextcloud/vue": "^9.8.2",
-        "dompurify": "^3.4.8",
+        "dompurify": "^3.4.12",
         "markdown-it": "^14.2.0",
         "vue": "^3.5.35",
         "vue-material-design-icons": "^5.3.1",
@@ -9207,9 +9207,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.8",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.8.tgz",
-      "integrity": "sha512-yb1cEmaOum7wFvOCSQxyfgVlv5D47Rc30iZWoMpbDIWTnJ6grDDQyu2KFJzB2k7u0pMuJcQ1zphH//fFnw2tjQ==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/package.json b/package.json
index 432e3e89..04c1223b 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "@nextcloud/l10n": "^3.4.1",
     "@nextcloud/router": "^3.1.0",
     "@nextcloud/vue": "^9.8.2",
-    "dompurify": "^3.4.8",
+    "dompurify": "^3.4.12",
     "markdown-it": "^14.2.0",
     "vue": "^3.5.35",
     "vue-material-design-icons": "^5.3.1",