diff --git a/package-lock.json b/package-lock.json
index a26154b269..e7b462be63 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -44257,7 +44257,7 @@
         "utf-8-validate": "^5.0.2",
         "valid-data-url": "^2.0.0",
         "valid-url": "^1.0.9",
-        "xml-crypto": "^2.1.2",
+        "xml-crypto": "^2.1.6",
         "xml2js": "^0.6.2",
         "xregexp": "^4.3.0",
         "yauzl": "^2.10.0"
@@ -45719,6 +45719,28 @@
         "loose-envify": "^1.0.0"
       }
     },
+    "services/web/node_modules/xml-crypto": {
+      "version": "2.1.6",
+      "resolved": "https://registry.npmjs.org/xml-crypto/-/xml-crypto-2.1.6.tgz",
+      "integrity": "sha512-jjvpO8vHNV8QFhW5bMypP+k4BjBqHe/HrpIwpPcdUnUTIJakSIuN96o3Sdah4tKu2z64kM/JHEH8iEHGCc6Gyw==",
+      "license": "MIT",
+      "dependencies": {
+        "@xmldom/xmldom": "^0.7.9",
+        "xpath": "0.0.32"
+      },
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "services/web/node_modules/xpath": {
+      "version": "0.0.32",
+      "resolved": "https://registry.npmjs.org/xpath/-/xpath-0.0.32.tgz",
+      "integrity": "sha512-rxMJhSIoiO8vXcWvSifKqhvV96GjiD5wYb8/QHdoRyQvraTpp4IEv944nhGausZZ3u7dhQXteZuZbaqfpB7uYw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6.0"
+      }
+    },
     "services/web/node_modules/yallist": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
diff --git a/services/web/package.json b/services/web/package.json
index df6d572fc5..4347d6e169 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -169,7 +169,7 @@
     "utf-8-validate": "^5.0.2",
     "valid-data-url": "^2.0.0",
     "valid-url": "^1.0.9",
-    "xml-crypto": "^2.1.2",
+    "xml-crypto": "^2.1.6",
     "xml2js": "^0.6.2",
     "xregexp": "^4.3.0",
     "yauzl": "^2.10.0"