diff --git a/Cargo.lock b/Cargo.lock
index cbda1545..caa377c9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4466,9 +4466,9 @@ checksum = "5a651516ddc9168ebd67b24afd085a718be02f8858fe406591b013d101ce2f40"
 
 [[package]]
 name = "quick-xml"
-version = "0.37.1"
+version = "0.37.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f22f29bdff3987b4d8632ef95fd6424ec7e4e0a57e2f4fc63e489e75357f6a03"
+checksum = "bf763ab1c7a3aa408be466efc86efe35ed1bd3dd74173ed39d6b0d0a6f0ba148"
 dependencies = [
  "memchr",
  "serde",
diff --git a/exon/exon-mzml/Cargo.toml b/exon/exon-mzml/Cargo.toml
index 6330a56c..cbd53481 100644
--- a/exon/exon-mzml/Cargo.toml
+++ b/exon/exon-mzml/Cargo.toml
@@ -18,7 +18,7 @@ exon-common = { path = "../exon-common", version = "0.32.4" }
 flate2 = { version = "1.0.33" }
 futures = { workspace = true }
 object_store = { workspace = true }
-quick-xml = { version = "0.37.1", features = [
+quick-xml = { version = "0.37.3", features = [
   "async-tokio",
   "serialize",
   "overlapped-lists",