diff --git a/build/frontend-legacy/package-lock.json b/build/frontend-legacy/package-lock.json
index d4c67c4672533..2b3cdd8397794 100644
--- a/build/frontend-legacy/package-lock.json
+++ b/build/frontend-legacy/package-lock.json
@@ -45,7 +45,7 @@
         "crypto-browserify": "^3.12.1",
         "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
         "debounce": "^3.0.0",
-        "dompurify": "^3.4.5",
+        "dompurify": "^3.4.7",
         "escape-html": "^1.0.3",
         "focus-trap": "^8.0.1",
         "is-svg": "^6.1.0",
@@ -8992,9 +8992,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.5",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.5.tgz",
-      "integrity": "sha512-OrwIBKsdNSVEeubdJ1HBv/wNENRM9ytAVCv7YXt//A3vPdVMNuACRqK9mXCGCBW2ln7BT/A4X0jXHo2Gu89miA==",
+      "version": "3.4.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.7.tgz",
+      "integrity": "sha512-2jBxDJY4RR06tQNy4w5FlFH7kfxsQZlufd0sbv+chfHCxeJwrFw2baUDsSwvBISD4K4RDbd0PTfy3uNXsR6siA==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/build/frontend-legacy/package.json b/build/frontend-legacy/package.json
index a70ce40fe1386..1839148c54752 100644
--- a/build/frontend-legacy/package.json
+++ b/build/frontend-legacy/package.json
@@ -64,7 +64,7 @@
     "crypto-browserify": "^3.12.1",
     "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
     "debounce": "^3.0.0",
-    "dompurify": "^3.4.5",
+    "dompurify": "^3.4.7",
     "escape-html": "^1.0.3",
     "focus-trap": "^8.0.1",
     "is-svg": "^6.1.0",