diff --git a/Gemfile b/Gemfile
index 0fa8bf6..b6d70f6 100644
--- a/Gemfile
+++ b/Gemfile
@@ -36,7 +36,7 @@ gem 'rails-controller-testing'
 # Use rubocop for static code analysis
 gem 'rubocop'
 # bundler audit
-gem 'rexml', '>= 3.2.7'
+gem 'rexml', '>= 3.3.2'
 gem 'rubocop-rails', require: false
 
 gem 'rubocop-rspec', require: false
diff --git a/Gemfile.lock b/Gemfile.lock
index 8d0cc90..5682f0a 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -264,7 +264,7 @@ GEM
     responders (3.1.1)
       actionpack (>= 5.2)
       railties (>= 5.2)
-    rexml (3.3.1)
+    rexml (3.3.2)
       strscan
     rspec-core (3.13.0)
       rspec-support (~> 3.13.0)
@@ -432,7 +432,7 @@ DEPENDENCIES
   rails-controller-testing
   rb-readline
   recaptcha
-  rexml (>= 3.2.7)
+  rexml (>= 3.3.2)
   rspec-rails (~> 4.1.0)
   rspec_junit_formatter
   rubocop