diff --git a/package-lock.json b/package-lock.json
index 8aa818fd..37424d34 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -57,7 +57,7 @@
         "unbzip2-stream": "^1.3.3",
         "winston": "^2.3.0",
         "winston-azure-application-insights": "^1.5.0",
-        "xml2js": "^0.5.0"
+        "xml2js": "^0.6.2"
       },
       "devDependencies": {
         "@tsconfig/node24": "24.0.3",
@@ -7870,7 +7870,9 @@
       }
     },
     "node_modules/xml2js": {
-      "version": "0.5.0",
+      "version": "0.6.2",
+      "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.6.2.tgz",
+      "integrity": "sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==",
       "license": "MIT",
       "dependencies": {
         "sax": ">=0.6.0",
diff --git a/package.json b/package.json
index 83ed55f6..a8081dfe 100644
--- a/package.json
+++ b/package.json
@@ -82,7 +82,7 @@
     "unbzip2-stream": "^1.3.3",
     "winston": "^2.3.0",
     "winston-azure-application-insights": "^1.5.0",
-    "xml2js": "^0.5.0"
+    "xml2js": "^0.6.2"
   },
   "devDependencies": {
     "@tsconfig/node24": "24.0.3",