diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7246617a7..2ac7730b1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -224,8 +224,8 @@ catalogs:
       specifier: ^9.0.0
       version: 9.0.0
     dompurify:
-      specifier: ^3.4.10
-      version: 3.4.10
+      specifier: ^3.4.12
+      version: 3.4.12
     dotenv:
       specifier: ^17.4.2
       version: 17.4.2
@@ -1011,7 +1011,7 @@ importers:
         version: 9.0.0
       dompurify:
         specifier: 'catalog:'
-        version: 3.4.10
+        version: 3.4.12
       dotenv:
         specifier: 'catalog:'
         version: 17.4.2
@@ -6449,6 +6449,9 @@ packages:
   dompurify@3.4.10:
     resolution: {integrity: sha512-0xzNv0e7oYC6yyuOGZIABPM4qtg3QxLFniDNPP4ZP90wR8Yq3zgwpRbrNiT4N3IKqDbbYFEJLV+JWEs19aZ//w==}
 
+  dompurify@3.4.12:
+    resolution: {integrity: sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==}
+
   domutils@3.2.2:
     resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
 
@@ -13880,6 +13883,10 @@ snapshots:
     optionalDependencies:
       '@types/trusted-types': 2.0.7
 
+  dompurify@3.4.12:
+    optionalDependencies:
+      '@types/trusted-types': 2.0.7
+
   domutils@3.2.2:
     dependencies:
       dom-serializer: 2.0.0
@@ -14663,7 +14670,7 @@ snapshots:
 
   isomorphic-dompurify@3.16.0(@noble/hashes@1.8.0):
     dependencies:
-      dompurify: 3.4.10
+      dompurify: 3.4.12
       jsdom: 29.1.1(@noble/hashes@1.8.0)
     transitivePeerDependencies:
       - '@noble/hashes'
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index da0179b63..f8b014061 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -100,7 +100,7 @@ catalog:
   cross-env: ^10.1.0
   devalue: ^5.8.1
   diff: ^9.0.0
-  dompurify: ^3.4.10
+  dompurify: ^3.4.12
   dotenv: ^17.4.2
   drizzle-kit: 1.0.0-rc.4-273829f
   drizzle-orm: 1.0.0-rc.4-273829f