diff --git a/package-lock.json b/package-lock.json
index 35a840fa..3d581e50 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.3.0",
       "dependencies": {
         "@uswds/uswds": "3.7.1",
-        "dompurify": "^3.2.6"
+        "dompurify": "^3.3.2"
       },
       "devDependencies": {
         "rimraf": "^3.0.2"
@@ -72,10 +72,13 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
+      "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
+      "engines": {
+        "node": ">=20"
+      },
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/package.json b/package.json
index 7da5fe62..b72de92c 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@uswds/uswds": "3.7.1",
-    "dompurify": "^3.2.6"
+    "dompurify": "^3.3.2"
   },
   "devDependencies": {
     "rimraf": "^3.0.2"