diff --git a/sites/upsun/package-lock.json b/sites/upsun/package-lock.json
index 02b71627fc..34e9431c14 100644
--- a/sites/upsun/package-lock.json
+++ b/sites/upsun/package-lock.json
@@ -5861,9 +5861,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
@@ -15829,7 +15829,7 @@
       "dependencies": {
         "axios": "^1.15.0",
         "buffer": "^6.0.3",
-        "dompurify": "^3.2.4",
+        "dompurify": "^3.4.12",
         "path-browserify": "^1.0.1",
         "platformsh-config": "^2.4.1",
         "process": "^0.11.10",
@@ -20090,7 +20090,7 @@
         "babel-loader": "^9.1.2",
         "buffer": "^6.0.3",
         "css-loader": "^6.7.3",
-        "dompurify": "^3.2.4",
+        "dompurify": "3.4.12",
         "eslint": "^8.34.0",
         "eslint-config-airbnb": "^19.0.4",
         "eslint-import-resolver-webpack": "^0.13.2",
@@ -20109,7 +20109,7 @@
         "style-loader": "^3.3.1",
         "webpack": "^5.94.0",
         "webpack-cli": "^5.0.1",
-        "webpack-dev-server": "5.2.5",
+        "webpack-dev-server": "^5.2.5",
         "webpack-merge": "^5.8.0"
       },
       "dependencies": {
@@ -20156,9 +20156,9 @@
       }
     },
     "dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "requires": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/sites/upsun/static/scripts/xss/package.json b/sites/upsun/static/scripts/xss/package.json
index 8de7ed3c6b..78298faf1b 100644
--- a/sites/upsun/static/scripts/xss/package.json
+++ b/sites/upsun/static/scripts/xss/package.json
@@ -32,7 +32,7 @@
   "dependencies": {
     "axios": "^1.15.0",
     "buffer": "^6.0.3",
-    "dompurify": "^3.2.4",
+    "dompurify": "^3.4.12",
     "path-browserify": "^1.0.1",
     "platformsh-config": "^2.4.1",
     "process": "^0.11.10",