diff --git a/extensions/copilot/package-lock.json b/extensions/copilot/package-lock.json
index df5570d981151..36cb9e2c636c3 100644
--- a/extensions/copilot/package-lock.json
+++ b/extensions/copilot/package-lock.json
@@ -43,7 +43,7 @@
 				"applicationinsights": "^2.9.7",
 				"best-effort-json-parser": "^1.2.1",
 				"diff": "^8.0.3",
-				"dompurify": "^3.4.1",
+				"dompurify": "^3.4.12",
 				"express": "^5.2.1",
 				"ignore": "^7.0.5",
 				"isbinaryfile": "^5.0.4",
@@ -9478,9 +9478,9 @@
 			}
 		},
 		"node_modules/dompurify": {
-			"version": "3.4.1",
-			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.1.tgz",
-			"integrity": "sha512-JahakDAIg1gyOm7dlgWSDjV4n7Ip2PKR55NIT6jrMfIgLFgWo81vdr1/QGqWtFNRqXP9UV71oVePtjqS2ebnPw==",
+			"version": "3.4.12",
+			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+			"integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
 			"license": "(MPL-2.0 OR Apache-2.0)",
 			"optionalDependencies": {
 				"@types/trusted-types": "^2.0.7"
diff --git a/extensions/copilot/package.json b/extensions/copilot/package.json
index a12de99ce35eb..4508c038c5e3b 100644
--- a/extensions/copilot/package.json
+++ b/extensions/copilot/package.json
@@ -6738,7 +6738,7 @@
 		"applicationinsights": "^2.9.7",
 		"best-effort-json-parser": "^1.2.1",
 		"diff": "^8.0.3",
-		"dompurify": "^3.4.1",
+		"dompurify": "^3.4.12",
 		"express": "^5.2.1",
 		"ignore": "^7.0.5",
 		"isbinaryfile": "^5.0.4",