diff --git a/requirements.txt b/requirements.txt
index 4622d69be..2cf025014 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -80,5 +80,5 @@ usaddress==0.5.10
 user-agents==1.1.0
 # validate-email==1.3    March 2025 we have functions called validate_email, so there is a conflict
 wikipedia==1.4.0
-xmltodict==0.12.0
+xmltodict==0.15.0
 zipp>=3.19.1             # not directly required, pinned by Snyk to avoid a vulnerability