diff --git a/Cargo.lock b/Cargo.lock
index 9eb689b98a17..98c6ed4ebbf4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3943,6 +3943,15 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "quick-xml"
+version = "0.37.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ffbfb3ddf5364c9cfcd65549a1e7b801d0e8d1b14c1a1590a6408aa93cfbfa84"
+dependencies = [
+ "memchr",
+]
+
 [[package]]
 name = "quinn"
 version = "0.11.5"
@@ -4306,7 +4315,7 @@ dependencies = [
  "num-traits",
  "percent-encoding",
  "png",
- "quick-xml",
+ "quick-xml 0.37.0",
  "rand",
  "realfft",
  "regress",
@@ -6121,7 +6130,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "597f2001b2e5fc1121e3d5b9791d3e78f05ba6bfa4641053846248e3a13661c3"
 dependencies = [
  "proc-macro2",
- "quick-xml",
+ "quick-xml 0.36.2",
  "quote",
 ]
 
diff --git a/core/Cargo.toml b/core/Cargo.toml
index b4b7ae9d7be3..a3a59ca72629 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -29,7 +29,7 @@ bitflags = { workspace = true }
 smallvec = { version = "1.13.2", features = ["union"] }
 num-traits = { workspace = true }
 num-derive = { workspace = true }
-quick-xml = "0.36.2"
+quick-xml = "0.37.0"
 downcast-rs = "1.2.1"
 url = { workspace = true }
 weak-table = "0.3.2"