diff --git a/package-lock.json b/package-lock.json
index 2bbbd57ad..270d0b537 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "@nextcloud/vue": "^6.0.0-beta.4",
         "@nextcloud/vue-dashboard": "^2.0.1",
         "blueimp-md5": "^2.19.0",
-        "dompurify": "^2.3.10",
+        "dompurify": "^2.4.0",
         "lodash": "^4.17.21",
         "markdown-it": "^13.0.1",
         "markdown-it-link-attributes": "^4.0.1",
@@ -7580,9 +7580,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "2.3.10",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.10.tgz",
-      "integrity": "sha512-o7Fg/AgC7p/XpKjf/+RC3Ok6k4St5F7Q6q6+Nnm3p2zGWioAY6dh0CbbuwOhH2UcSzKsdniE/YnE2/92JcsA+g=="
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.4.0.tgz",
+      "integrity": "sha512-Be9tbQMZds4a3C6xTmz68NlMfeONA//4dOavl/1rNw50E+/QO0KVpbcU0PcaW0nsQxurXls9ZocqFxk8R2mWEA=="
     },
     "node_modules/domutils": {
       "version": "2.8.0",
@@ -24863,9 +24863,9 @@
       }
     },
     "dompurify": {
-      "version": "2.3.10",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.10.tgz",
-      "integrity": "sha512-o7Fg/AgC7p/XpKjf/+RC3Ok6k4St5F7Q6q6+Nnm3p2zGWioAY6dh0CbbuwOhH2UcSzKsdniE/YnE2/92JcsA+g=="
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.4.0.tgz",
+      "integrity": "sha512-Be9tbQMZds4a3C6xTmz68NlMfeONA//4dOavl/1rNw50E+/QO0KVpbcU0PcaW0nsQxurXls9ZocqFxk8R2mWEA=="
     },
     "domutils": {
       "version": "2.8.0",
diff --git a/package.json b/package.json
index 79938b965..63b9cdacf 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "@nextcloud/vue": "^6.0.0-beta.4",
     "@nextcloud/vue-dashboard": "^2.0.1",
     "blueimp-md5": "^2.19.0",
-    "dompurify": "^2.3.10",
+    "dompurify": "^2.4.0",
     "lodash": "^4.17.21",
     "markdown-it": "^13.0.1",
     "markdown-it-link-attributes": "^4.0.1",