diff --git a/package-lock.json b/package-lock.json
index 7a0a8b15c7..87b3305eb3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@renovatebot/ruby-semver": "^3.0.23",
         "@sentry/node": "^8.27.0",
         "@shields_io/camp": "^18.1.2",
-        "@xmldom/xmldom": "0.8.10",
+        "@xmldom/xmldom": "0.9.0",
         "badge-maker": "file:badge-maker",
         "bytes": "^3.1.2",
         "camelcase": "^8.0.0",
@@ -6395,9 +6395,9 @@
       }
     },
     "node_modules/@xmldom/xmldom": {
-      "version": "0.8.10",
-      "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.10.tgz",
-      "integrity": "sha512-2WALfTl4xo2SkGCYRt6rDTFfk9R1czmBvUQy12gK2KuRKIpWEhcbbzy8EZXtz/jkRqHX8bFEc6FC1HjX4TUWYw==",
+      "version": "0.9.0",
+      "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.9.0.tgz",
+      "integrity": "sha512-Zb9MTlKGnUdxglDKF75cJwvsNp+EhPwzguLSTp/u1yeDU59lz7eA9e14S9z/sn5HHKX5NEQZaKjePl/69uqGhw==",
       "engines": {
         "node": ">=10.0.0"
       }
diff --git a/package.json b/package.json
index d2a3efa609..6ae1829221 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@renovatebot/ruby-semver": "^3.0.23",
     "@sentry/node": "^8.27.0",
     "@shields_io/camp": "^18.1.2",
-    "@xmldom/xmldom": "0.8.10",
+    "@xmldom/xmldom": "0.9.0",
     "badge-maker": "file:badge-maker",
     "bytes": "^3.1.2",
     "camelcase": "^8.0.0",
diff --git a/services/dynamic/dynamic-xml.service.js b/services/dynamic/dynamic-xml.service.js
index 2d8aad9ba1..b6ee089fab 100644
--- a/services/dynamic/dynamic-xml.service.js
+++ b/services/dynamic/dynamic-xml.service.js
@@ -75,7 +75,7 @@ export default class DynamicXml extends BaseService {
     const pathIsAttr = (
       pathExpression.split('/').slice(-1)[0] || ''
     ).startsWith('@')
-    const parsed = new DOMParser().parseFromString(buffer)
+    const parsed = new DOMParser().parseFromString(buffer, 'text/xml')
 
     let values
     try {