diff --git a/app/package.json b/app/package.json
index cad4716c47b..8b4bebf7a4e 100644
--- a/app/package.json
+++ b/app/package.json
@@ -29,7 +29,7 @@
     "desktop-notifications": "^0.1.7",
     "desktop-trampoline": "desktop/desktop-trampoline#v0.9.8",
     "dexie": "^2.0.0",
-    "dompurify": "^2.3.3",
+    "dompurify": "^2.5.4",
     "double-ended-queue": "^2.1.0-0",
     "dugite": "^1.104.0",
     "electron-window-state": "^5.0.3",
diff --git a/app/yarn.lock b/app/yarn.lock
index ead7dd9bbf6..c21f8b8b753 100644
--- a/app/yarn.lock
+++ b/app/yarn.lock
@@ -429,10 +429,10 @@ dom-matches@^2.0.0:
   resolved "https://registry.yarnpkg.com/dom-matches/-/dom-matches-2.0.0.tgz#d2728b416a87533980eb089b848d253cf23a758c"
   integrity sha1-0nKLQWqHUzmA6wibhI0lPPI6dYw=
 
-dompurify@^2.3.3:
-  version "2.3.3"
-  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.3.3.tgz#c1af3eb88be47324432964d8abc75cf4b98d634c"
-  integrity sha512-dqnqRkPMAjOZE0FogZ+ceJNM2dZ3V/yNOuFB7+39qpO93hHhfRpHw3heYQC7DPK9FqbQTfBKUJhiSfz4MvXYwg==
+dompurify@^2.5.4:
+  version "2.5.4"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.4.tgz#347e91070963b22db31c7c8d0ce9a0a2c3c08746"
+  integrity sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==
 
 double-ended-queue@^2.1.0-0:
   version "2.1.0-0"