diff --git a/package.json b/package.json
index 3c362cb3..28433cd2 100644
--- a/package.json
+++ b/package.json
@@ -101,7 +101,7 @@
     "mousetrap": "^1.6.5",
     "object-assign-deep": "^0.4.0",
     "parse-link-header": "^2.0.0",
-    "sanitize-html": "^2.8.1",
+    "sanitize-html": "^2.9.0",
     "simplayer": "0.0.8",
     "sqlite3": "^5.1.4",
     "system-font-families": "^0.6.0",
diff --git a/yarn.lock b/yarn.lock
index 2c3999fa..d8f1a7c3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10737,10 +10737,10 @@ sanitize-filename@^1.6.3:
   dependencies:
     truncate-utf8-bytes "^1.0.0"
 
-sanitize-html@^2.8.1:
-  version "2.8.1"
-  resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-2.8.1.tgz#319c4fdba67e1edf35b1fd6d9362210044826d47"
-  integrity sha512-qK5neD0SaMxGwVv5txOYv05huC3o6ZAA4h5+7nJJgWMNFUNRjcjLO6FpwAtKzfKCZ0jrG6xTk6eVFskbvOGblg==
+sanitize-html@^2.9.0:
+  version "2.9.0"
+  resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-2.9.0.tgz#f4829557b0175df9059d90fe972d5e6facb8565c"
+  integrity sha512-KY1hpSbqFNcpoLf+nP7iStbP5JfQZ2Nd19ZEE7qFsQqRdp+sO5yX/e5+HoG9puFAcSTEpzQuihfKUltDcLlQjg==
   dependencies:
     deepmerge "^4.2.2"
     escape-string-regexp "^4.0.0"