diff --git a/package.json b/package.json
index 0f2b792bd..cd6faa859 100644
--- a/package.json
+++ b/package.json
@@ -85,7 +85,7 @@
     "playwright": "1.64.1",
     "svelte-eslint-parser": "1.10.0",
     "tailwind-merge": "3.7.0",
-    "xss": "1.0.16"
+    "xss": "1.0.17"
   },
   "packageManager": "pnpm@12.15.0",
   "engines": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7639caa17..23d56e292 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -216,8 +216,8 @@ importers:
         specifier: 3.7.0
         version: 3.7.0
       xss:
-        specifier: 1.0.16
-        version: 1.0.16
+        specifier: 1.0.17
+        version: 1.0.17
     devDependencies:
       '@dnd-kit/abstract':
         specifier: 0.5.1
@@ -4427,8 +4427,8 @@ packages:
   xmlchars@2.2.0:
     resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
 
-  xss@1.0.16:
-    resolution: {integrity: sha512-CsEvZ0QNH9vVgf3qldg+mJmmIwreZZEu/JS1SgldJrJqZgwyMrmIfENt1BJlkj/cPxO0c+R80kB5OMRtUPgqpQ==}
+  xss@1.0.17:
+    resolution: {integrity: sha512-+SEr5IDSgTBnhT6bnnf0mVRHT91+HU517zkahLNhkWLz8retCgeR1YDT4OknLiExA5+chn2Wy7z3KyjvnD8A2w==}
     engines: {node: '>= 0.10.0'}
     hasBin: true
 
@@ -8286,7 +8286,7 @@ snapshots:
 
   xmlchars@2.2.0: {}
 
-  xss@1.0.16:
+  xss@1.0.17:
     dependencies:
       commander: 2.20.3
       cssfilter: 0.0.10