diff --git a/Gemfile b/Gemfile
index 9a621b70..5b9c8426 100644
--- a/Gemfile
+++ b/Gemfile
@@ -8,7 +8,7 @@ group :development do
   gem 'mocha-on-bacon'
   gem 'prettybacon'
   gem 'rake', '~> 12.0'
-  gem 'rexml', '~> 3.2.5'
+  gem 'rexml', '~> 3.3.9'
   gem 'vcr'
   gem 'webmock'
   gem 'webrick', '~> 1.7.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 364ef60d..357b2701 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -91,7 +91,7 @@ GEM
     rb-kqueue (0.2.8)
       ffi (>= 0.5.0)
     regexp_parser (2.8.2)
-    rexml (3.2.6)
+    rexml (3.3.9)
     rubocop (1.57.1)
       base64 (~> 0.1.1)
       json (~> 2.3)
@@ -137,7 +137,7 @@ DEPENDENCIES
   pry
   rake (~> 12.0)
   rb-fsevent
-  rexml (~> 3.2.5)
+  rexml (~> 3.3.9)
   rubocop (~> 1.8)
   rubocop-performance
   vcr