diff --git a/package.json b/package.json
index e5fe07de0c..1e8ab5ede6 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,7 @@
     "dayjs": "1.8.29",
     "defu": "5.0.1",
     "diff2html": "3.4.24",
-    "dompurify": "2.4.5",
+    "dompurify": "2.5.4",
     "element-matches": "0.1.2",
     "event-target-shim": "5.0.1",
     "express": "4.17.1",
diff --git a/shell/package.json b/shell/package.json
index 17d62cfcb3..f14d675660 100644
--- a/shell/package.json
+++ b/shell/package.json
@@ -74,7 +74,7 @@
     "dagre-d3": "0.6.4",
     "dayjs": "1.8.29",
     "diff2html": "3.4.24",
-    "dompurify": "2.4.5",
+    "dompurify": "2.5.4",
     "element-matches": "^0.1.2",
     "eslint": "7.32.0",
     "eslint-config-standard": "16.0.3",
diff --git a/shell/yarn.lock b/shell/yarn.lock
index 5f67cc907b..f821291a3f 100644
--- a/shell/yarn.lock
+++ b/shell/yarn.lock
@@ -6917,10 +6917,10 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.1:
   dependencies:
     domelementtype "^2.2.0"
 
-dompurify@2.4.5:
-  version "2.4.5"
-  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.4.5.tgz#0e89a27601f0bad978f9a924e7a05d5d2cccdd87"
-  integrity sha512-jggCCd+8Iqp4Tsz0nIvpcb22InKEBrGz5dw3EQJMs8HPJDsKbFIO3STYtAvCfDx26Muevn1MHVI0XxjgFfmiSA==
+dompurify@2.5.4:
+  version "2.5.4"
+  resolved "https://registry.npmjs.org/dompurify/-/dompurify-2.5.4.tgz#347e91070963b22db31c7c8d0ce9a0a2c3c08746"
+  integrity sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==
 
 domutils@^2.5.2, domutils@^2.8.0:
   version "2.8.0"
diff --git a/storybook/yarn.lock b/storybook/yarn.lock
index f9b03bda1a..ad126334ed 100644
--- a/storybook/yarn.lock
+++ b/storybook/yarn.lock
@@ -7866,10 +7866,10 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.1:
   dependencies:
     domelementtype "^2.2.0"
 
-dompurify@2.4.5:
-  version "2.4.5"
-  resolved "https://registry.npmjs.org/dompurify/-/dompurify-2.4.5.tgz#0e89a27601f0bad978f9a924e7a05d5d2cccdd87"
-  integrity sha512-jggCCd+8Iqp4Tsz0nIvpcb22InKEBrGz5dw3EQJMs8HPJDsKbFIO3STYtAvCfDx26Muevn1MHVI0XxjgFfmiSA==
+dompurify@2.5.4:
+  version "2.5.4"
+  resolved "https://registry.npmjs.org/dompurify/-/dompurify-2.5.4.tgz#347e91070963b22db31c7c8d0ce9a0a2c3c08746"
+  integrity sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==
 
 domutils@^1.5.1:
   version "1.7.0"
@@ -13340,7 +13340,7 @@ shell-quote@1.7.3:
     dayjs "1.8.29"
     defu "5.0.1"
     diff2html "3.4.24"
-    dompurify "2.4.5"
+    dompurify "2.5.4"
     element-matches "0.1.2"
     event-target-shim "5.0.1"
     express "4.17.1"
diff --git a/yarn.lock b/yarn.lock
index 331190c28a..6b737529e3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7567,10 +7567,10 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.1:
   dependencies:
     domelementtype "^2.2.0"
 
-dompurify@2.4.5:
-  version "2.4.5"
-  resolved "https://registry.npmjs.org/dompurify/-/dompurify-2.4.5.tgz#0e89a27601f0bad978f9a924e7a05d5d2cccdd87"
-  integrity sha512-jggCCd+8Iqp4Tsz0nIvpcb22InKEBrGz5dw3EQJMs8HPJDsKbFIO3STYtAvCfDx26Muevn1MHVI0XxjgFfmiSA==
+dompurify@2.5.4:
+  version "2.5.4"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.4.tgz#347e91070963b22db31c7c8d0ce9a0a2c3c08746"
+  integrity sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==
 
 domutils@^2.5.2, domutils@^2.8.0:
   version "2.8.0"