diff --git a/Gemfile b/Gemfile
index 689593b..701c893 100644
--- a/Gemfile
+++ b/Gemfile
@@ -6,7 +6,7 @@ ruby '~> 3.2.2'
 gem 'aws-sdk-s3', '~> 1.30'
 gem 'dotenv'
 gem 'hashie'
-gem 'rexml'
+gem 'rexml', '>= 3.3.3'
 gem 'ruby-saml', '>= 1.9.0'
 gem 'rack-test', '>= 2.0.0'
 gem 'rake'
diff --git a/Gemfile.lock b/Gemfile.lock
index 1fd7503..fe3489c 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -52,7 +52,8 @@ GEM
     rack-test (2.0.2)
       rack (>= 1.3)
     rake (13.0.1)
-    rexml (3.2.5)
+    rexml (3.3.5)
+      strscan
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
@@ -75,6 +76,7 @@ GEM
       rack (~> 2.2, >= 2.2.4)
       rack-protection (= 3.0.4)
       tilt (~> 2.0)
+    strscan (3.1.0)
     test-unit (3.5.7)
       power_assert
     tilt (2.0.11)
@@ -94,7 +96,7 @@ DEPENDENCIES
   puma
   rack-test (>= 2.0.0)
   rake
-  rexml
+  rexml (>= 3.3.3)
   rspec
   ruby-saml (>= 1.9.0)
   sinatra (>= 3.0.4)
@@ -104,4 +106,4 @@ RUBY VERSION
    ruby 3.2.2p223
 
 BUNDLED WITH
-   2.2.33
+   2.4.6