diff --git a/Cargo.lock b/Cargo.lock
index aafe2243..334e6821 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2630,9 +2630,9 @@ checksum = "a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0"
 
 [[package]]
 name = "quick-xml"
-version = "0.39.4"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cdcc8dd4e2f670d309a5f0e83fe36dfdc05af317008fea29144da1a2ac858e5e"
+checksum = "0b7315c86b26aaef0321fba33c9dcc160da659c6a9d278f0f6a5656d6561c03b"
 dependencies = [
  "memchr",
  "serde",
diff --git a/extractor/Cargo.toml b/extractor/Cargo.toml
index d204aae0..02e3aa80 100644
--- a/extractor/Cargo.toml
+++ b/extractor/Cargo.toml
@@ -20,7 +20,7 @@ tokio = { version = "1.52", features = ["full"] }
 tokio-util = { version = "0.7", features = ["io-util"] }
 
 # XML parsing (following disco-quick's approach)
-quick-xml = { version = "0.39", features = ["serialize"] }
+quick-xml = { version = "0.40", features = ["serialize"] }
 
 # Compression handling
 flate2 = "1.1"