diff --git a/jbrowse/package-lock.json b/jbrowse/package-lock.json
index a608f1109..6539df623 100644
--- a/jbrowse/package-lock.json
+++ b/jbrowse/package-lock.json
@@ -24,7 +24,7 @@
         "child_process": "^1.0.2",
         "fs": "^0.0.1-security",
         "jquery": "^3.7.1",
-        "jspdf": "^4.0.0",
+        "jspdf": "^4.1.0",
         "jspdf-autotable": "^5.0.7",
         "node-polyfill-webpack-plugin": "4.1.0",
         "path-browserify": "^1.0.1",
@@ -6257,9 +6257,10 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.4.tgz",
-      "integrity": "sha512-ysFSFEDVduQpyhzAob/kkuJjf5zWkZD8/A9ywSp1byueyuCfHamrCBa14/Oc2iiB0e51B+NpxSl5gmzn+Ms/mg==",
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz",
+      "integrity": "sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
@@ -7968,9 +7969,9 @@
       }
     },
     "node_modules/jspdf": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/jspdf/-/jspdf-4.0.0.tgz",
-      "integrity": "sha512-w12U97Z6edKd2tXDn3LzTLg7C7QLJlx0BPfM3ecjK2BckUl9/81vZ+r5gK4/3KQdhAcEZhENUxRhtgYBj75MqQ==",
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/jspdf/-/jspdf-4.1.0.tgz",
+      "integrity": "sha512-xd1d/XRkwqnsq6FP3zH1Q+Ejqn2ULIJeDZ+FTKpaabVpZREjsJKRJwuokTNgdqOU+fl55KgbvgZ1pRTSWCP2kQ==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.28.4",
@@ -7980,7 +7981,7 @@
       "optionalDependencies": {
         "canvg": "^3.0.11",
         "core-js": "^3.6.0",
-        "dompurify": "^3.2.4",
+        "dompurify": "^3.3.1",
         "html2canvas": "^1.0.0-rc.5"
       }
     },
diff --git a/jbrowse/package.json b/jbrowse/package.json
index baa3472e9..7eb561f69 100644
--- a/jbrowse/package.json
+++ b/jbrowse/package.json
@@ -30,7 +30,7 @@
     "child_process": "^1.0.2",
     "fs": "^0.0.1-security",
     "jquery": "^3.7.1",
-    "jspdf": "^4.0.0",
+    "jspdf": "^4.1.0",
     "jspdf-autotable": "^5.0.7",
     "node-polyfill-webpack-plugin": "4.1.0",
     "path-browserify": "^1.0.1",