diff --git a/core/http/react-ui/package-lock.json b/core/http/react-ui/package-lock.json
index 10dbfd3eb..ccf8b576a 100644
--- a/core/http/react-ui/package-lock.json
+++ b/core/http/react-ui/package-lock.json
@@ -22,7 +22,7 @@
         "@lezer/highlight": "^1.2.1",
         "@modelcontextprotocol/ext-apps": "^1.2.2",
         "@modelcontextprotocol/sdk": "^1.30.0",
-        "dompurify": "^3.4.12",
+        "dompurify": "^3.4.13",
         "highlight.js": "^11.11.1",
         "hono": "4.12.34",
         "i18next": "^26.0.8",
@@ -2389,9 +2389,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.12",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
-      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
+      "version": "3.4.13",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz",
+      "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/core/http/react-ui/package.json b/core/http/react-ui/package.json
index 649ba78cb..e217ed83d 100644
--- a/core/http/react-ui/package.json
+++ b/core/http/react-ui/package.json
@@ -36,7 +36,7 @@
     "@lezer/highlight": "^1.2.1",
     "@modelcontextprotocol/ext-apps": "^1.2.2",
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "dompurify": "^3.4.12",
+    "dompurify": "^3.4.13",
     "highlight.js": "^11.11.1",
     "hono": "4.12.34",
     "i18next": "^26.0.8",