diff --git a/package-lock.json b/package-lock.json
index 02e7896c0..070c71a94 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
 				"@nextcloud/vue": "^5.3.1",
 				"@nextcloud/vue-dashboard": "^2.0.1",
 				"blueimp-md5": "^2.19.0",
-				"dompurify": "^2.3.8",
+				"dompurify": "^2.3.9",
 				"lodash": "^4.17.21",
 				"markdown-it": "^13.0.1",
 				"markdown-it-link-attributes": "^4.0.0",
@@ -7505,9 +7505,9 @@
 			}
 		},
 		"node_modules/dompurify": {
-			"version": "2.3.8",
-			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.8.tgz",
-			"integrity": "sha512-eVhaWoVibIzqdGYjwsBWodIQIaXFSB+cKDf4cfxLMsK0xiud6SE+/WCVx/Xw/UwQsa4cS3T2eITcdtmTg2UKcw=="
+			"version": "2.3.9",
+			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.9.tgz",
+			"integrity": "sha512-3zOnuTwup4lPV/GfGS6UzG4ub9nhSYagR/5tB3AvDEwqyy5dtyCM2dVjwGDCnrPerXifBKTYh/UWCGKK7ydhhw=="
 		},
 		"node_modules/domutils": {
 			"version": "2.8.0",
@@ -24684,9 +24684,9 @@
 			}
 		},
 		"dompurify": {
-			"version": "2.3.8",
-			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.8.tgz",
-			"integrity": "sha512-eVhaWoVibIzqdGYjwsBWodIQIaXFSB+cKDf4cfxLMsK0xiud6SE+/WCVx/Xw/UwQsa4cS3T2eITcdtmTg2UKcw=="
+			"version": "2.3.9",
+			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.9.tgz",
+			"integrity": "sha512-3zOnuTwup4lPV/GfGS6UzG4ub9nhSYagR/5tB3AvDEwqyy5dtyCM2dVjwGDCnrPerXifBKTYh/UWCGKK7ydhhw=="
 		},
 		"domutils": {
 			"version": "2.8.0",
diff --git a/package.json b/package.json
index a0bff09d9..69d011db8 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
 		"@nextcloud/vue": "^5.3.1",
 		"@nextcloud/vue-dashboard": "^2.0.1",
 		"blueimp-md5": "^2.19.0",
-		"dompurify": "^2.3.8",
+		"dompurify": "^2.3.9",
 		"lodash": "^4.17.21",
 		"markdown-it": "^13.0.1",
 		"markdown-it-link-attributes": "^4.0.0",