diff --git a/sharedb.planx.uk/package.json b/sharedb.planx.uk/package.json
index 65b7ec038c..1db340a203 100644
--- a/sharedb.planx.uk/package.json
+++ b/sharedb.planx.uk/package.json
@@ -4,7 +4,7 @@
   "private": true,
   "dependencies": {
     "@teamwork/websocket-json-stream": "^2.0.0",
-    "dompurify": "^3.0.6",
+    "dompurify": "^3.1.2",
     "jsdom": "^24.0.0",
     "jsonwebtoken": "^8.5.1",
     "pg": "^8.11.3",
diff --git a/sharedb.planx.uk/pnpm-lock.yaml b/sharedb.planx.uk/pnpm-lock.yaml
index 1f399298e9..ec991a3f57 100644
--- a/sharedb.planx.uk/pnpm-lock.yaml
+++ b/sharedb.planx.uk/pnpm-lock.yaml
@@ -14,8 +14,8 @@ dependencies:
     specifier: ^2.0.0
     version: 2.0.0
   dompurify:
-    specifier: ^3.0.6
-    version: 3.0.6
+    specifier: ^3.1.2
+    version: 3.1.2
   jsdom:
     specifier: ^24.0.0
     version: 24.0.0
@@ -124,8 +124,8 @@ packages:
     engines: {node: '>=0.4.0'}
     dev: false
 
-  /dompurify@3.0.6:
-    resolution: {integrity: sha512-ilkD8YEnnGh1zJ240uJsW7AzE+2qpbOUYjacomn3AvJ6J4JhKGSZ2nh4wUIXPZrEPppaCLx5jFe8T89Rk8tQ7w==}
+  /dompurify@3.1.2:
+    resolution: {integrity: sha512-hLGGBI1tw5N8qTELr3blKjAML/LY4ANxksbS612UiJyDfyf/2D092Pvm+S7pmeTGJRqvlJkFzBoHBQKgQlOQVg==}
     dev: false
 
   /dynamic-dedupe@0.3.0: