diff --git a/app/package.json b/app/package.json
index c583a8344d2..3f90b165f06 100644
--- a/app/package.json
+++ b/app/package.json
@@ -29,7 +29,7 @@
     "desktop-notifications": "^0.2.4",
     "desktop-trampoline": "desktop/desktop-trampoline#v0.9.8",
     "dexie": "^3.2.2",
-    "dompurify": "^2.3.3",
+    "dompurify": "^2.5.0",
     "dugite": "^2.4.0",
     "electron-window-state": "^5.0.3",
     "event-kit": "^2.0.0",
diff --git a/app/yarn.lock b/app/yarn.lock
index 2bc423246d8..4487c2e0bd0 100644
--- a/app/yarn.lock
+++ b/app/yarn.lock
@@ -382,10 +382,10 @@ dom-matches@^2.0.0:
   resolved "https://registry.yarnpkg.com/dom-matches/-/dom-matches-2.0.0.tgz#d2728b416a87533980eb089b848d253cf23a758c"
   integrity sha1-0nKLQWqHUzmA6wibhI0lPPI6dYw=
 
-dompurify@^2.3.3:
-  version "2.3.3"
-  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.3.3.tgz#c1af3eb88be47324432964d8abc75cf4b98d634c"
-  integrity sha512-dqnqRkPMAjOZE0FogZ+ceJNM2dZ3V/yNOuFB7+39qpO93hHhfRpHw3heYQC7DPK9FqbQTfBKUJhiSfz4MvXYwg==
+dompurify@^2.5.0:
+  version "2.5.7"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.7.tgz#6e0d36b9177db5a99f18ade1f28579db5ab839d7"
+  integrity sha512-2q4bEI+coQM8f5ez7kt2xclg1XsecaV9ASJk/54vwlfRRNQfDqJz2pzQ8t0Ix/ToBpXlVjrRIx7pFC/o8itG2Q==
 
 dugite@^2.4.0:
   version "2.4.0"