diff --git a/packages/@expo/config-plugins/CHANGELOG.md b/packages/@expo/config-plugins/CHANGELOG.md
index 01c5622d4b5650..0f9df0abd664dc 100644
--- a/packages/@expo/config-plugins/CHANGELOG.md
+++ b/packages/@expo/config-plugins/CHANGELOG.md
@@ -10,6 +10,8 @@
 
 ### 💡 Others
 
+- Update `xml2js` version. ([#22872](https://github.com/expo/expo/pull/22872) by [@EvanBacon](https://github.com/EvanBacon))
+
 ## 7.1.0 — 2023-06-13
 
 ### 🎉 New features
diff --git a/packages/@expo/config-plugins/package.json b/packages/@expo/config-plugins/package.json
index d6bc6614c85d98..52221dceded2a1 100644
--- a/packages/@expo/config-plugins/package.json
+++ b/packages/@expo/config-plugins/package.json
@@ -46,12 +46,12 @@
     "semver": "^7.3.5",
     "slash": "^3.0.0",
     "xcode": "^3.0.1",
-    "xml2js": "0.4.23"
+    "xml2js": "0.6.0"
   },
   "devDependencies": {
     "@types/debug": "^4.1.5",
     "@types/find-up": "^4.0.0",
-    "@types/xml2js": "^0.4.5"
+    "@types/xml2js": "~0.4.11"
   },
   "publishConfig": {
     "access": "public"
diff --git a/packages/@expo/prebuild-config/CHANGELOG.md b/packages/@expo/prebuild-config/CHANGELOG.md
index a64ec17f97a616..c60162b40a02c2 100644
--- a/packages/@expo/prebuild-config/CHANGELOG.md
+++ b/packages/@expo/prebuild-config/CHANGELOG.md
@@ -10,6 +10,8 @@
 
 ### 💡 Others
 
+- Update `xml2js` version. ([#22872](https://github.com/expo/expo/pull/22872) by [@EvanBacon](https://github.com/EvanBacon))
+
 ## 6.1.0 — 2023-06-13
 
 ### 🎉 New features
diff --git a/packages/@expo/prebuild-config/package.json b/packages/@expo/prebuild-config/package.json
index 69fe17b971409a..855bea3d82d162 100644
--- a/packages/@expo/prebuild-config/package.json
+++ b/packages/@expo/prebuild-config/package.json
@@ -32,7 +32,7 @@
   ],
   "devDependencies": {
     "@types/debug": "^4.1.5",
-    "@types/xml2js": "^0.4.5"
+    "@types/xml2js": "~0.4.11"
   },
   "dependencies": {
     "@expo/config": "~8.0.0",
@@ -44,7 +44,7 @@
     "fs-extra": "^9.0.0",
     "resolve-from": "^5.0.0",
     "semver": "7.3.2",
-    "xml2js": "0.4.23"
+    "xml2js": "0.6.0"
   },
   "peerDependencies": {
     "expo-modules-autolinking": ">=0.8.1"
diff --git a/yarn.lock b/yarn.lock
index 2f07ea7f24ef66..8c3681076aa543 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4549,7 +4549,7 @@
   dependencies:
     "@types/node" "*"
 
-"@types/xml2js@^0.4.5":
+"@types/xml2js@~0.4.11":
   version "0.4.11"
   resolved "https://registry.yarnpkg.com/@types/xml2js/-/xml2js-0.4.11.tgz#bf46a84ecc12c41159a7bd9cf51ae84129af0e79"
   integrity sha512-JdigeAKmCyoJUiQljjr7tQG3if9NkqGUgwEUqBvV0N7LM4HyQk7UXCnusRa1lnvXAEYJ8mw8GtZWioagNztOwA==
@@ -19750,6 +19750,14 @@ xml2js@0.4.23:
     sax ">=0.6.0"
     xmlbuilder "~11.0.0"
 
+xml2js@0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/xml2js/-/xml2js-0.6.0.tgz#07afc447a97d2bd6507a1f76eeadddb09f7a8282"
+  integrity sha512-eLTh0kA8uHceqesPqSE+VvO1CDDJWMwlQfB6LuN6T8w6MaDJ8Txm8P7s5cHD0miF0V+GGTZrDQfxPZQVsur33w==
+  dependencies:
+    sax ">=0.6.0"
+    xmlbuilder "~11.0.0"
+
 xmlbuilder@^14.0.0:
   version "14.0.0"
   resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-14.0.0.tgz#876b5aec4f05ffd5feb97b0a871c855d16fbeb8c"