diff --git a/package-lock.json b/package-lock.json
index feb8c8fe5..23e8f1adb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "@nextcloud/vue": "^7.12.6",
         "blueimp-md5": "^2.19.0",
         "chroma-js": "^2.4.2",
-        "dompurify": "^3.0.8",
+        "dompurify": "^3.0.9",
         "lodash": "^4.17.21",
         "markdown-it": "^14.0.0",
         "markdown-it-link-attributes": "^4.0.1",
@@ -8763,9 +8763,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.0.8",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.0.8.tgz",
-      "integrity": "sha512-b7uwreMYL2eZhrSCRC4ahLTeZcPZxSmYfmcQGXGkXiZSNW1X85v+SDM5KsWcpivIiUBH47Ji7NtyUdpLeF5JZQ=="
+      "version": "3.0.9",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.0.9.tgz",
+      "integrity": "sha512-uyb4NDIvQ3hRn6NiC+SIFaP4mJ/MdXlvtunaqK9Bn6dD3RuB/1S/gasEjDHD8eiaqdSael2vBv+hOs7Y+jhYOQ=="
     },
     "node_modules/domutils": {
       "version": "2.8.0",
@@ -32886,9 +32886,9 @@
       }
     },
     "dompurify": {
-      "version": "3.0.8",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.0.8.tgz",
-      "integrity": "sha512-b7uwreMYL2eZhrSCRC4ahLTeZcPZxSmYfmcQGXGkXiZSNW1X85v+SDM5KsWcpivIiUBH47Ji7NtyUdpLeF5JZQ=="
+      "version": "3.0.9",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.0.9.tgz",
+      "integrity": "sha512-uyb4NDIvQ3hRn6NiC+SIFaP4mJ/MdXlvtunaqK9Bn6dD3RuB/1S/gasEjDHD8eiaqdSael2vBv+hOs7Y+jhYOQ=="
     },
     "domutils": {
       "version": "2.8.0",
diff --git a/package.json b/package.json
index 37621ecd4..4df02414e 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
     "@nextcloud/vue": "^7.12.6",
     "blueimp-md5": "^2.19.0",
     "chroma-js": "^2.4.2",
-    "dompurify": "^3.0.8",
+    "dompurify": "^3.0.9",
     "lodash": "^4.17.21",
     "markdown-it": "^14.0.0",
     "markdown-it-link-attributes": "^4.0.1",