diff --git a/requirements.txt b/requirements.txt
index ca3dd2e9..e4417c88 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -31,7 +31,7 @@ pydantic==2.12.4
 # but dependabot updates these separately (which is broken) and is annoying,
 # so we rely on pydantic to pull in the right version of pydantic-core.
 # pydantic-core==2.23.4
-xmltodict==0.14.2
+xmltodict==1.0.2
 pyelftools==0.32
 pygments==2.19.1
 python-flirt==0.9.2