diff --git a/package-lock.json b/package-lock.json
index 84bfc70a0..cc8adc58b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11767,10 +11767,13 @@
             }
         },
         "node_modules/dompurify": {
-            "version": "3.2.7",
-            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-            "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+            "version": "3.3.2",
+            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
+            "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
             "license": "(MPL-2.0 OR Apache-2.0)",
+            "engines": {
+                "node": ">=20"
+            },
             "optionalDependencies": {
                 "@types/trusted-types": "^2.0.7"
             }
diff --git a/package.json b/package.json
index 9be5dd261..9eec59b43 100644
--- a/package.json
+++ b/package.json
@@ -173,6 +173,7 @@
         "typescript-eslint": "8.55.0"
     },
     "overrides": {
-        "esbuild": "0.27.3"
+        "esbuild": "0.27.3",
+        "dompurify": "3.3.2"
     }
 }