diff --git a/package.json b/package.json
index 96e33d69e..1a81f13f1 100644
--- a/package.json
+++ b/package.json
@@ -142,7 +142,7 @@
     "require-all": "3.0.0",
     "rfc4648": "1.5.3",
     "rss-parser": "3.13.0",
-    "sanitize-html": "2.11.0",
+    "sanitize-html": "2.12.0",
     "simplecc-wasm": "0.1.5",
     "socks-proxy-agent": "8.0.2",
     "source-map": "0.7.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 84e62189e..c0bf95094 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -183,8 +183,8 @@ dependencies:
     specifier: 3.13.0
     version: 3.13.0
   sanitize-html:
-    specifier: 2.11.0
-    version: 2.11.0
+    specifier: 2.12.0
+    version: 2.12.0
   simplecc-wasm:
     specifier: 0.1.5
     version: 0.1.5
@@ -8360,8 +8360,8 @@ packages:
   /safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
-  /sanitize-html@2.11.0:
-    resolution: {integrity: sha512-BG68EDHRaGKqlsNjJ2xUB7gpInPA8gVx/mvjO743hZaeMCZ2DwzW7xvsqZ+KNU4QKwj86HJ3uu2liISf2qBBUA==}
+  /sanitize-html@2.12.0:
+    resolution: {integrity: sha512-2pq2H0b4npSaMPrRuauYVml1Q3BzaL67Y8WDOk9gsqoS8gS+VFZcgwF1ITJbfOCHgw1sUQMG14KwXyVE+75tSg==}
     dependencies:
       deepmerge: 4.3.1
       escape-string-regexp: 4.0.0