diff --git a/app/package.json b/app/package.json
index c583a8344d2..789476af9f0 100644
--- a/app/package.json
+++ b/app/package.json
@@ -29,7 +29,7 @@
     "desktop-notifications": "^0.2.4",
     "desktop-trampoline": "desktop/desktop-trampoline#v0.9.8",
     "dexie": "^3.2.2",
-    "dompurify": "^2.3.3",
+    "dompurify": "^2.5.4",
     "dugite": "^2.4.0",
     "electron-window-state": "^5.0.3",
     "event-kit": "^2.0.0",
diff --git a/app/yarn.lock b/app/yarn.lock
index 2bc423246d8..36a810ea64b 100644
--- a/app/yarn.lock
+++ b/app/yarn.lock
@@ -382,10 +382,10 @@ dom-matches@^2.0.0:
   resolved "https://registry.yarnpkg.com/dom-matches/-/dom-matches-2.0.0.tgz#d2728b416a87533980eb089b848d253cf23a758c"
   integrity sha1-0nKLQWqHUzmA6wibhI0lPPI6dYw=
 
-dompurify@^2.3.3:
-  version "2.3.3"
-  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.3.3.tgz#c1af3eb88be47324432964d8abc75cf4b98d634c"
-  integrity sha512-dqnqRkPMAjOZE0FogZ+ceJNM2dZ3V/yNOuFB7+39qpO93hHhfRpHw3heYQC7DPK9FqbQTfBKUJhiSfz4MvXYwg==
+dompurify@^2.5.4:
+  version "2.5.6"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.6.tgz#8402b501611eaa7fb3786072297fcbe2787f8592"
+  integrity sha512-zUTaUBO8pY4+iJMPE1B9XlO2tXVYIcEA4SNGtvDELzTSCQO7RzH+j7S180BmhmJId78lqGU2z19vgVx2Sxs/PQ==
 
 dugite@^2.4.0:
   version "2.4.0"