diff --git a/Gemfile b/Gemfile
index 8da6cd866..2e82e62db 100644
--- a/Gemfile
+++ b/Gemfile
@@ -12,7 +12,7 @@ gem 'mini_racer'
 gem 'bootsnap', '~> 1.4.2'
 
 # rexml gem is a bundled gem since Ruby 3.0.0.
-gem 'rexml', '~> 3.2.4'
+gem 'rexml', '~> 3.3.2'
 
 gem 'faker', '~> 3.1', '>= 3.1.1'
 gem 'normalize-rails'
diff --git a/Gemfile.lock b/Gemfile.lock
index daf4e9fca..0d52ce486 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -380,7 +380,8 @@ GEM
     responders (3.1.0)
       actionpack (>= 5.2)
       railties (>= 5.2)
-    rexml (3.2.5)
+    rexml (3.3.2)
+      strscan
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -441,6 +442,7 @@ GEM
       activesupport (>= 5.2)
       sprockets (>= 3.0.0)
     stackprof (0.2.24)
+    strscan (3.1.0)
     thor (1.2.1)
     tilt (2.1.0)
     timeout (0.3.2)
@@ -515,7 +517,7 @@ DEPENDENCIES
   rails (= 6.1.7.6)
   rails-controller-testing
   record_tag_helper (~> 1.0)
-  rexml (~> 3.2.4)
+  rexml (~> 3.3.2)
   rspec-rails
   rubocop (~> 0.62.0)
   sassc-rails