diff --git a/dotcom-rendering/package.json b/dotcom-rendering/package.json
index 04d22253297..1ac1988d334 100644
--- a/dotcom-rendering/package.json
+++ b/dotcom-rendering/package.json
@@ -101,7 +101,7 @@
 		"constructs": "10.5.1",
 		"cpy": "11.0.0",
 		"css-loader": "7.1.2",
-		"dompurify": "3.2.4",
+		"dompurify": "3.3.2",
 		"dynamic-import-polyfill": "0.1.1",
 		"eslint": "8.57.1",
 		"eslint-plugin-custom-elements": "0.0.8",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2c97d2239ac..6aa2bd2c4dd 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -515,8 +515,8 @@ importers:
         specifier: 7.1.2
         version: 7.1.2(webpack@5.104.1)
       dompurify:
-        specifier: 3.2.4
-        version: 3.2.4
+        specifier: 3.3.2
+        version: 3.3.2
       dynamic-import-polyfill:
         specifier: 0.1.1
         version: 0.1.1
@@ -5631,8 +5631,9 @@ packages:
     resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
     engines: {node: '>= 4'}
 
-  dompurify@3.2.4:
-    resolution: {integrity: sha512-ysFSFEDVduQpyhzAob/kkuJjf5zWkZD8/A9ywSp1byueyuCfHamrCBa14/Oc2iiB0e51B+NpxSl5gmzn+Ms/mg==}
+  dompurify@3.3.2:
+    resolution: {integrity: sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==}
+    engines: {node: '>=20'}
 
   domutils@2.8.0:
     resolution: {integrity: sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==}
@@ -16187,7 +16188,7 @@ snapshots:
     dependencies:
       domelementtype: 2.3.0
 
-  dompurify@3.2.4:
+  dompurify@3.3.2:
     optionalDependencies:
       '@types/trusted-types': 2.0.7