diff --git a/apps/web/package.json b/apps/web/package.json
index d6020c52..df87f6fe 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -40,7 +40,7 @@
     "@xyflow/react": "^12.9.3",
     "dagre": "^0.8.5",
     "dayjs": "^1.11.19",
-    "dompurify": "^3.4.0",
+    "dompurify": "^3.4.9",
     "framer-motion": "^12.23.24",
     "juice": "^11.0.3",
     "lucide-react": "^0.553.0",
diff --git a/yarn.lock b/yarn.lock
index 742ba493..ea56c7c6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9683,7 +9683,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dompurify@npm:*, dompurify@npm:^3.4.0":
+"dompurify@npm:*":
   version: 3.4.0
   resolution: "dompurify@npm:3.4.0"
   dependencies:
@@ -9695,6 +9695,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"dompurify@npm:^3.4.9":
+  version: 3.4.9
+  resolution: "dompurify@npm:3.4.9"
+  dependencies:
+    "@types/trusted-types": "npm:^2.0.7"
+  dependenciesMeta:
+    "@types/trusted-types":
+      optional: true
+  checksum: 10c0/e03d88d5959dcaae172357002d74e47e66fc6685cac8928fe4b02982f7b4051e2b8ff70279e4e6fb13be112c0e5cae11439ab960c06c487cb91a3c1a18baed49
+  languageName: node
+  linkType: hard
+
 "domutils@npm:^2.4.2":
   version: 2.8.0
   resolution: "domutils@npm:2.8.0"
@@ -19445,7 +19457,7 @@ __metadata:
     "@xyflow/react": "npm:^12.9.3"
     dagre: "npm:^0.8.5"
     dayjs: "npm:^1.11.19"
-    dompurify: "npm:^3.4.0"
+    dompurify: "npm:^3.4.9"
     framer-motion: "npm:^12.23.24"
     juice: "npm:^11.0.3"
     lucide-react: "npm:^0.553.0"