diff --git a/app/package-lock.json b/app/package-lock.json
index 4ae81b73..00c46a04 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -10,7 +10,7 @@
       "license": "AGPL-3.0",
       "dependencies": {
         "@preact/signals": "^2.9.1",
-        "dompurify": "^3.4.14",
+        "dompurify": "^3.4.17",
         "highlight.js": "^11.11.1",
         "lucide-preact": "^1.17.0",
         "marked": "^18.0.3",
@@ -2510,9 +2510,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.14",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.14.tgz",
-      "integrity": "sha512-dVoH9z+MY+C9IilgGCk3YfFqjLi3fChm2OiKJMzh6axrJ5qwxqWaZamgmHrpv22CN/KdbZJuGEGgfQoL00LTdg==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/app/package.json b/app/package.json
index bf0a334a..9ea68071 100644
--- a/app/package.json
+++ b/app/package.json
@@ -50,7 +50,7 @@
   },
   "dependencies": {
     "@preact/signals": "^2.9.1",
-    "dompurify": "^3.4.14",
+    "dompurify": "^3.4.17",
     "highlight.js": "^11.11.1",
     "lucide-preact": "^1.17.0",
     "marked": "^18.0.3",