diff --git a/package-lock.json b/package-lock.json
index cd21448b2..1cad51449 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -26,7 +26,7 @@
         "@nextcloud/vue": "^8.34.0",
         "blueimp-md5": "^2.19.0",
         "chroma-js": "^3.2.0",
-        "dompurify": "^3.4.0",
+        "dompurify": "^3.4.10",
         "frappe-gantt": "^1.2.2",
         "lodash": "^4.18.1",
         "markdown-it": "^14.1.1",
@@ -11571,9 +11571,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
-      "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
+      "version": "3.4.10",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.10.tgz",
+      "integrity": "sha512-0xzNv0e7oYC6yyuOGZIABPM4qtg3QxLFniDNPP4ZP90wR8Yq3zgwpRbrNiT4N3IKqDbbYFEJLV+JWEs19aZ//w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/package.json b/package.json
index 0d7957e0f..ad3dc12eb 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
     "@nextcloud/vue": "^8.34.0",
     "blueimp-md5": "^2.19.0",
     "chroma-js": "^3.2.0",
-    "dompurify": "^3.4.0",
+    "dompurify": "^3.4.10",
     "frappe-gantt": "^1.2.2",
     "lodash": "^4.18.1",
     "markdown-it": "^14.1.1",