diff --git a/Gemfile b/Gemfile
index aac6bb13..e18bef33 100644
--- a/Gemfile
+++ b/Gemfile
@@ -32,7 +32,7 @@ group :development do
   gem "kitchen-puppet"
   gem "kitchen-docker", git: "https://github.com/DataDog/kitchen-docker.git", branch: 'main', require: false
   gem "kitchen-verifier-serverspec"
-  gem "rexml", '~> 3.4.0',                       require: false
+  gem "rexml", '~> 3.4.2',                       require: false
   gem "mixlib-shellout", "~> 2.2.7",             platforms: [:ruby]
   if ruby_version >= Gem::Version.new('2.5') && ruby_version < Gem::Version.new('3.1')
     gem "test-kitchen", '= 3.0.0', platforms: [:ruby]
diff --git a/Gemfile.lock b/Gemfile.lock
index a919b837..1384ef76 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -338,7 +338,7 @@ GEM
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
     retryable (3.0.5)
-    rexml (3.4.1)
+    rexml (3.4.2)
     rgen (0.10.2)
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
@@ -540,7 +540,7 @@ DEPENDENCIES
   puppet_litmus (~> 1.0)
   puppetlabs_spec_helper (~> 8.0)
   rb-readline (= 0.5.5)
-  rexml (~> 3.4.0)
+  rexml (~> 3.4.2)
   rspec-puppet-facts (~> 5.2.0)
   rubocop (~> 1.50.0)
   rubocop-performance (= 1.16.0)