diff --git a/build/frontend-legacy/package-lock.json b/build/frontend-legacy/package-lock.json
index 368b9ff4c6dd0..62f986d21e9f5 100644
--- a/build/frontend-legacy/package-lock.json
+++ b/build/frontend-legacy/package-lock.json
@@ -46,7 +46,7 @@
         "crypto-browserify": "^3.12.1",
         "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
         "debounce": "^3.0.0",
-        "dompurify": "^3.3.2",
+        "dompurify": "^3.3.3",
         "escape-html": "^1.0.3",
         "focus-trap": "^7.8.0",
         "handlebars": "^4.7.8",
diff --git a/build/frontend-legacy/package.json b/build/frontend-legacy/package.json
index 4fd1f24871c25..9d89700e743e0 100644
--- a/build/frontend-legacy/package.json
+++ b/build/frontend-legacy/package.json
@@ -62,7 +62,7 @@
     "crypto-browserify": "^3.12.1",
     "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
     "debounce": "^3.0.0",
-    "dompurify": "^3.3.2",
+    "dompurify": "^3.3.3",
     "escape-html": "^1.0.3",
     "focus-trap": "^7.8.0",
     "handlebars": "^4.7.8",