diff --git a/composer.json b/composer.json
index b6e003f1a09b131589175de704b86120282aba9c..dad629860bb7218a380f8bc2d56986f9b0c3ab5e 100644
--- a/composer.json
+++ b/composer.json
@@ -82,7 +82,7 @@
 		"typo3/class-alias-loader": "^1.0",
 		"typo3/cms-cli": "^3.0",
 		"typo3/cms-composer-installers": "^2.0 || ^3.0",
-		"typo3/html-sanitizer": "^2.0.7",
+		"typo3/html-sanitizer": "^2.0.8",
 		"typo3/phar-stream-wrapper": "^3.1.6",
 		"typo3/symfony-psr-event-dispatcher-adapter": "^1.0 || ^2.0",
 		"typo3fluid/fluid": "^2.7.0"
diff --git a/composer.lock b/composer.lock
index 732e13683e3482ad8c0f266243b78648fb617b1a..1a411fb7db3e3398bdfcd3e0eca4ed7b2b2a3fd4 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "c44962ab462197dada0a35039ab7acc3",
+    "content-hash": "bad29e59907694c34f43022f4c42fc21",
     "packages": [
         {
             "name": "bacon/bacon-qr-code",
@@ -4924,16 +4924,16 @@
         },
         {
             "name": "typo3/html-sanitizer",
-            "version": "v2.0.7",
+            "version": "v2.0.8",
             "source": {
                 "type": "git",
                 "url": "https://github.com/TYPO3/html-sanitizer.git",
-                "reference": "c5f1e2eb37f3b7799029ab01e145028e35b2e61a"
+                "reference": "8df823ea5aa2335a2740e121c3f3d6db2c01626e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/TYPO3/html-sanitizer/zipball/c5f1e2eb37f3b7799029ab01e145028e35b2e61a",
-                "reference": "c5f1e2eb37f3b7799029ab01e145028e35b2e61a",
+                "url": "https://api.github.com/repos/TYPO3/html-sanitizer/zipball/8df823ea5aa2335a2740e121c3f3d6db2c01626e",
+                "reference": "8df823ea5aa2335a2740e121c3f3d6db2c01626e",
                 "shasum": ""
             },
             "require": {
@@ -4969,9 +4969,9 @@
             "description": "HTML sanitizer aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.",
             "support": {
                 "issues": "https://github.com/TYPO3/html-sanitizer/issues",
-                "source": "https://github.com/TYPO3/html-sanitizer/tree/v2.0.7"
+                "source": "https://github.com/TYPO3/html-sanitizer/tree/v2.0.8"
             },
-            "time": "2021-08-08T20:57:41+00:00"
+            "time": "2021-08-12T15:11:29+00:00"
         },
         {
             "name": "typo3/phar-stream-wrapper",
diff --git a/typo3/sysext/core/composer.json b/typo3/sysext/core/composer.json
index 888159d6b8670016f07a75697c813a0fc0c24c2f..a222405609751557dbd1da05ac6dfeea45664ca1 100644
--- a/typo3/sysext/core/composer.json
+++ b/typo3/sysext/core/composer.json
@@ -66,7 +66,7 @@
 		"typo3/class-alias-loader": "^1.0",
 		"typo3/cms-cli": "^3.0",
 		"typo3/cms-composer-installers": "^2.0 || ^3.0",
-		"typo3/html-sanitizer": "^2.0.7",
+		"typo3/html-sanitizer": "^2.0.8",
 		"typo3/phar-stream-wrapper": "^3.1.6",
 		"typo3/symfony-psr-event-dispatcher-adapter": "^1.0 || ^2.0",
 		"typo3fluid/fluid": "^2.7.0"