diff --git a/package-lock.json b/package-lock.json
index 4002070d7..7fffcf4e6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -26,7 +26,7 @@
         "@nextcloud/vue": "^8.39.0",
         "blueimp-md5": "^2.19.0",
         "chroma-js": "^3.2.0",
-        "dompurify": "^3.4.12",
+        "dompurify": "^3.4.13",
         "frappe-gantt": "^1.2.2",
         "lodash": "^4.18.1",
         "markdown-it": "^14.2.0",
@@ -11561,9 +11561,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.12",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
-      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
+      "version": "3.4.13",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz",
+      "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/package.json b/package.json
index 0c643854e..7e8a04913 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
     "@nextcloud/vue": "^8.39.0",
     "blueimp-md5": "^2.19.0",
     "chroma-js": "^3.2.0",
-    "dompurify": "^3.4.12",
+    "dompurify": "^3.4.13",
     "frappe-gantt": "^1.2.2",
     "lodash": "^4.18.1",
     "markdown-it": "^14.2.0",