diff --git a/Dockerfile b/Dockerfile
index 9e850502aac9..4f38d9a4cbad 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -67,7 +67,7 @@ RUN set -eux; \
   npm install -g npm@latest; \
   npm install --prefix /tmp/npm-cve-patch --no-audit --no-fund --ignore-scripts \
     --install-strategy=nested \
-    brace-expansion@5.0.12 ip-address@10.7.3 postcss-selector-parser@7.1.6 tar@7.5.22 undici@6.29.0; \
+    brace-expansion@5.0.12 ip-address@10.7.4 postcss-selector-parser@7.1.6 tar@7.5.22 undici@6.29.0; \
   for pkg in brace-expansion ip-address postcss-selector-parser tar undici; do \
     test -d "/usr/local/lib/node_modules/npm/node_modules/$pkg"; \
     rm -rf "/usr/local/lib/node_modules/npm/node_modules/$pkg"; \
diff --git a/package-lock.json b/package-lock.json
index 40fd42c732bc..4d408ed9c19b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -47,7 +47,7 @@
         "compression": "^1.8.2",
         "cron-parser": "^5.10.0",
         "csv-stringify": "^6.8.3",
-        "dompurify": "^3.4.14",
+        "dompurify": "^3.4.17",
         "express": "^5.2.1",
         "fast-copy": "^4.1.0",
         "fetch-socks": "^1.3.3",
@@ -19785,9 +19785,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.16",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
-      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -25242,9 +25242,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.7.2",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
-      "integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
+      "version": "10.7.4",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
+      "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
diff --git a/package.json b/package.json
index af772527fa06..24d78d81454b 100644
--- a/package.json
+++ b/package.json
@@ -361,7 +361,7 @@
     "commander": "^15.0.0",
     "cron-parser": "^5.10.0",
     "csv-stringify": "^6.8.3",
-    "dompurify": "^3.4.14",
+    "dompurify": "^3.4.17",
     "express": "^5.2.1",
     "fetch-socks": "^1.3.3",
     "fflate": "^0.8.3",
@@ -542,7 +542,7 @@
     "fast-xml-parser": "^5.10.1",
     "sharp": "^0.35.5",
     "postcss": "^8.5.18",
-    "ip-address": "^10.7.2",
+    "ip-address": "^10.7.4",
     "axios": "^1.20.0",
     "qs": "^6.16.0",
     "uuid": "^14.0.2",
@@ -605,7 +605,7 @@
     },
     "nanoid": "^3.3.17",
     "monaco-editor": {
-      "dompurify": "^3.4.14"
+      "dompurify": "^3.4.17"
     },
     "csv-parse": "^7.0.2"
   }