diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index bd42b7a..85c5d62 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -697,7 +697,7 @@ version = "0.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1f6597e8bdbca37f1f56e5a80d15857b0932aead21a78d20de49e99e74933046"
 dependencies = [
- "quick-xml",
+ "quick-xml 0.38.4",
  "serde",
 ]
 
@@ -3827,7 +3827,7 @@ checksum = "740ebea15c5d1428f910cd1a5f52cebf8d25006245ed8ade92702f4943d91e07"
 dependencies = [
  "base64 0.22.1",
  "indexmap 2.13.0",
- "quick-xml",
+ "quick-xml 0.38.4",
  "serde",
  "time",
 ]
@@ -4056,6 +4056,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "quick-xml"
+version = "0.39.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "958f21e8e7ceb5a1aa7fa87fab28e7c75976e0bfe7e23ff069e0a260f894067d"
+dependencies = [
+ "memchr",
+]
+
 [[package]]
 name = "quote"
 version = "1.0.45"
@@ -4560,7 +4569,7 @@ dependencies = [
  "chrono",
  "comemo",
  "log",
- "quick-xml",
+ "quick-xml 0.39.2",
  "serde",
  "serde_json",
  "tauri",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 3adceca..5966c6a 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -34,4 +34,4 @@ tauri-plugin-deep-link = "2.4.9"
 # Pure-Rust XML pull-parser (MIT). Used by the Final Draft (.fdx) importer
 # in `screenplay::fdx_import` — `quick-xml` handles BOM, entity decoding,
 # and whitespace per the XML 1.0 spec, which we don't want to re-implement.
-quick-xml = "0.38"
+quick-xml = "0.39"