diff --git a/build/frontend-legacy/package-lock.json b/build/frontend-legacy/package-lock.json
index a43f6ba950336..83d1a45fbdfa8 100644
--- a/build/frontend-legacy/package-lock.json
+++ b/build/frontend-legacy/package-lock.json
@@ -46,7 +46,7 @@
         "crypto-browserify": "^3.12.1",
         "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
         "debounce": "^2.2.0",
-        "dompurify": "^3.2.7",
+        "dompurify": "^3.3.0",
         "escape-html": "^1.0.3",
         "focus-trap": "^7.6.5",
         "handlebars": "^4.7.8",
@@ -8805,10 +8805,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
-      "license": "(MPL-2.0 OR Apache-2.0)",
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.0.tgz",
+      "integrity": "sha512-r+f6MYR1gGN1eJv0TVQbhA7if/U7P87cdPl3HN5rikqaBSBxLiCb/b9O+2eG0cxz0ghyU+mU1QkbsOwERMYlWQ==",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/build/frontend-legacy/package.json b/build/frontend-legacy/package.json
index 2d604141386dc..0ef7f54b036ec 100644
--- a/build/frontend-legacy/package.json
+++ b/build/frontend-legacy/package.json
@@ -62,7 +62,7 @@
     "crypto-browserify": "^3.12.1",
     "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
     "debounce": "^2.2.0",
-    "dompurify": "^3.2.7",
+    "dompurify": "^3.3.0",
     "escape-html": "^1.0.3",
     "focus-trap": "^7.6.5",
     "handlebars": "^4.7.8",