diff --git a/package-lock.json b/package-lock.json
index b7173b70..d5c22b73 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,10 +15,10 @@
                 "classnames": "^2.5.1",
                 "dayjs": "^1.11.13",
                 "deepsignal": "^1.5.0",
-                "dompurify": "^3.2.3",
+                "dompurify": "^3.4.0",
                 "get-xpath": "^3.2.0",
                 "goober": "^2.1.16",
-                "lodash-es": "^4.17.23",
+                "lodash-es": "^4.18.1",
                 "mustache": "^4.2.0",
                 "preact": "^10.28.2",
                 "uuid": "^11.0.3"
@@ -3715,9 +3715,9 @@
             "dev": true
         },
         "node_modules/dompurify": {
-            "version": "3.3.3",
-            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
-            "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
+            "version": "3.4.0",
+            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
+            "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
             "license": "(MPL-2.0 OR Apache-2.0)",
             "optionalDependencies": {
                 "@types/trusted-types": "^2.0.7"
@@ -5905,9 +5905,9 @@
             "license": "MIT"
         },
         "node_modules/lodash-es": {
-            "version": "4.17.23",
-            "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.23.tgz",
-            "integrity": "sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==",
+            "version": "4.18.1",
+            "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz",
+            "integrity": "sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==",
             "license": "MIT"
         },
         "node_modules/lodash.camelcase": {
diff --git a/package.json b/package.json
index 70c12da0..65ae4521 100644
--- a/package.json
+++ b/package.json
@@ -91,10 +91,10 @@
         "classnames": "^2.5.1",
         "dayjs": "^1.11.13",
         "deepsignal": "^1.5.0",
-        "dompurify": "^3.2.3",
+        "dompurify": "^3.4.0",
         "get-xpath": "^3.2.0",
         "goober": "^2.1.16",
-        "lodash-es": "^4.17.23",
+        "lodash-es": "^4.18.1",
         "mustache": "^4.2.0",
         "preact": "^10.28.2",
         "uuid": "^11.0.3"