diff --git a/package.json b/package.json
index 1a81f13f1..7414ce79f 100644
--- a/package.json
+++ b/package.json
@@ -142,7 +142,7 @@
     "require-all": "3.0.0",
     "rfc4648": "1.5.3",
     "rss-parser": "3.13.0",
-    "sanitize-html": "2.12.0",
+    "sanitize-html": "2.12.1",
     "simplecc-wasm": "0.1.5",
     "socks-proxy-agent": "8.0.2",
     "source-map": "0.7.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c0bf95094..694932bf7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -183,8 +183,8 @@ dependencies:
     specifier: 3.13.0
     version: 3.13.0
   sanitize-html:
-    specifier: 2.12.0
-    version: 2.12.0
+    specifier: 2.12.1
+    version: 2.12.1
   simplecc-wasm:
     specifier: 0.1.5
     version: 0.1.5
@@ -8360,8 +8360,8 @@ packages:
   /safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
-  /sanitize-html@2.12.0:
-    resolution: {integrity: sha512-2pq2H0b4npSaMPrRuauYVml1Q3BzaL67Y8WDOk9gsqoS8gS+VFZcgwF1ITJbfOCHgw1sUQMG14KwXyVE+75tSg==}
+  /sanitize-html@2.12.1:
+    resolution: {integrity: sha512-Plh+JAn0UVDpBRP/xEjsk+xDCoOvMBwQUf/K+/cBAVuTbtX8bj2VB7S1sL1dssVpykqp0/KPSesHrqXtokVBpA==}
     dependencies:
       deepmerge: 4.3.1
       escape-string-regexp: 4.0.0