diff --git a/package-lock.json b/package-lock.json
index f280025a..4c11d217 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "adaptivecards": "^2.10.0",
         "axios": "1.7.4",
         "cypress-real-events": "^1.7.0",
-        "dompurify": "2.4.9",
+        "dompurify": "^2.5.4",
         "flatpickr": "4.6.3",
         "immutable": "^4.0.0-rc.12",
         "lodash": "^4.17.21",
@@ -5452,9 +5452,10 @@
       "dev": true
     },
     "node_modules/dompurify": {
-      "version": "2.4.9",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.4.9.tgz",
-      "integrity": "sha512-iHtnxYMotKgOTvxIqq677JsKHvCOkAFqj9x8Mek2zdeHW1XjuFKwjpmZeMaXQRQ8AbJZDbcRz/+r1QhwvFtmQg=="
+      "version": "2.5.4",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.4.tgz",
+      "integrity": "sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==",
+      "license": "(MPL-2.0 OR Apache-2.0)"
     },
     "node_modules/domutils": {
       "version": "1.7.0",
@@ -17416,9 +17417,9 @@
       "dev": true
     },
     "dompurify": {
-      "version": "2.4.9",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.4.9.tgz",
-      "integrity": "sha512-iHtnxYMotKgOTvxIqq677JsKHvCOkAFqj9x8Mek2zdeHW1XjuFKwjpmZeMaXQRQ8AbJZDbcRz/+r1QhwvFtmQg=="
+      "version": "2.5.4",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.4.tgz",
+      "integrity": "sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA=="
     },
     "domutils": {
       "version": "1.7.0",
diff --git a/package.json b/package.json
index 4777b021..92245bd5 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
     "adaptivecards": "^2.10.0",
     "axios": "1.7.4",
     "cypress-real-events": "^1.7.0",
-    "dompurify": "2.4.9",
+    "dompurify": "2.5.4",
     "flatpickr": "4.6.3",
     "immutable": "^4.0.0-rc.12",
     "lodash": "^4.17.21",