diff --git a/Cargo.lock b/Cargo.lock
index 0f0e6f40..9554c308 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2456,7 +2456,7 @@ dependencies = [
  "flate2",
  "futures",
  "object_store",
- "quick-xml",
+ "quick-xml 0.37.1",
  "serde",
  "tokio",
 ]
@@ -4019,7 +4019,7 @@ dependencies = [
  "md-5",
  "parking_lot",
  "percent-encoding",
- "quick-xml",
+ "quick-xml 0.36.2",
  "rand",
  "reqwest",
  "ring",
@@ -4423,6 +4423,16 @@ name = "quick-xml"
 version = "0.36.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f7649a7b4df05aed9ea7ec6f628c67c9953a43869b8bc50929569b2999d443fe"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.37.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f22f29bdff3987b4d8632ef95fd6424ec7e4e0a57e2f4fc63e489e75357f6a03"
 dependencies = [
  "memchr",
  "serde",
diff --git a/exon/exon-mzml/Cargo.toml b/exon/exon-mzml/Cargo.toml
index 3f6c088a..6330a56c 100644
--- a/exon/exon-mzml/Cargo.toml
+++ b/exon/exon-mzml/Cargo.toml
@@ -18,7 +18,7 @@ exon-common = { path = "../exon-common", version = "0.32.4" }
 flate2 = { version = "1.0.33" }
 futures = { workspace = true }
 object_store = { workspace = true }
-quick-xml = { version = "0.36.1", features = [
+quick-xml = { version = "0.37.1", features = [
   "async-tokio",
   "serialize",
   "overlapped-lists",