diff --git a/Gemfile b/Gemfile
index 922cd6b0f..c7db3ce42 100644
--- a/Gemfile
+++ b/Gemfile
@@ -12,7 +12,7 @@ gem 'mini_racer'
 gem 'bootsnap', '~> 1.4.2'
 
 # rexml gem is a bundled gem since Ruby 3.0.0.
-gem 'rexml', '~> 3.3.2'
+gem 'rexml', '~> 3.3.3'
 
 gem 'normalize-rails'
 gem 'interactor'
diff --git a/Gemfile.lock b/Gemfile.lock
index f9070c2c8..f71c6e964 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -347,7 +347,7 @@ GEM
     responders (3.1.0)
       actionpack (>= 5.2)
       railties (>= 5.2)
-    rexml (3.3.2)
+    rexml (3.3.3)
       strscan
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
@@ -483,7 +483,7 @@ DEPENDENCIES
   rails (= 6.1.7.6)
   rails-controller-testing
   record_tag_helper (~> 1.0)
-  rexml (~> 3.3.2)
+  rexml (~> 3.3.3)
   rspec-rails
   rubocop (~> 0.62.0)
   sassc-rails