diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3caadab8..e84ef78b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -414,7 +414,7 @@ overrides:
   lodash@<=4.17.23: '>=4.18.0'
   lodash@>=4.0.0 <=4.17.22: '>=4.17.23'
   lodash@>=4.0.0 <=4.17.23: '>=4.18.0'
-  markdown-it@>=13.0.0 <14.1.1: '>=14.1.1'
+  markdown-it@>=13.0.0 <14.1.1: '>=14.3.3'
   mdast-util-to-hast@>=13.0.0 <13.2.1: '>=13.2.1'
   minimatch@<3.1.3: '>=3.1.3'
   minimatch@<3.1.4: '>=3.1.4'
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index f341ae4c..a91f1bd9 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -833,7 +833,8 @@ minimumReleaseAgeExclude:
   - protobufjs@8.4.3
   - dompurify@3.4.9
   - dompurify@3.4.8
-  - markdown-it@14.1.2
+  # Renovate security update: markdown-it@14.3.3
+  - markdown-it@14.1.2 || 14.3.3
   - '@opentelemetry/core@2.8.0'
   - undici@8.5.0
   - undici@7.28.0
@@ -1040,7 +1041,7 @@ overrides:
   lodash@<=4.17.23: '>=4.18.0'
   lodash@>=4.0.0 <=4.17.22: '>=4.17.23'
   lodash@>=4.0.0 <=4.17.23: '>=4.18.0'
-  markdown-it@>=13.0.0 <14.1.1: '>=14.1.1'
+  markdown-it@>=13.0.0 <14.1.1: '>=14.3.3'
   mdast-util-to-hast@>=13.0.0 <13.2.1: '>=13.2.1'
   minimatch@<3.1.3: '>=3.1.3'
   minimatch@<3.1.4: '>=3.1.4'