diff --git a/Cargo.lock b/Cargo.lock
index 379ab53cb..7986da42a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4470,7 +4470,7 @@ dependencies = [
  "md-5 0.11.0",
  "mea",
  "percent-encoding",
- "quick-xml",
+ "quick-xml 0.41.0",
  "reqsign-core",
  "serde",
  "serde_json",
@@ -4540,7 +4540,7 @@ dependencies = [
  "log",
  "md-5 0.11.0",
  "opendal-core",
- "quick-xml",
+ "quick-xml 0.41.0",
  "reqsign-aws-v4",
  "reqsign-core",
  "reqsign-file-read-tokio",
@@ -5663,6 +5663,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "quick-xml"
+version = "0.42.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41b1177fdf999d2321d3fb46ff47159d9c1fb9ad66a4879f8c50a0b504615e9b"
+dependencies = [
+ "memchr",
+]
+
 [[package]]
 name = "quinn"
 version = "0.11.11"
@@ -5980,7 +5989,7 @@ dependencies = [
  "http",
  "log",
  "percent-encoding",
- "quick-xml",
+ "quick-xml 0.41.0",
  "reqsign-core",
  "rust-ini",
  "serde",
@@ -5998,7 +6007,7 @@ dependencies = [
  "bytes",
  "http",
  "log",
- "quick-xml",
+ "quick-xml 0.41.0",
  "reqsign-aws-core",
  "reqsign-core",
  "serde",
@@ -8151,7 +8160,7 @@ dependencies = [
  "percent-encoding",
  "prost",
  "prost-types",
- "quick-xml",
+ "quick-xml 0.42.0",
  "rand 0.10.2",
  "regex",
  "reqwest",
@@ -8281,7 +8290,7 @@ dependencies = [
  "moka",
  "percent-encoding",
  "prost",
- "quick-xml",
+ "quick-xml 0.42.0",
  "rayon",
  "reqwest",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index 821338d69..8fe2ff066 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -192,7 +192,7 @@ subtle = "=2.6.1"
 # Serialization
 serde = { version = "=1.0.229", features = ["derive"] }
 serde_json = "=1.0.151"
-quick-xml = "=0.41.0"
+quick-xml = "=0.42.0"
 serde_yaml = "=0.9.34"
 serde_ignored = "=0.1.14"
 toml = "=1.1.4"