diff --git a/CHANGELOG.md b/CHANGELOG.md
index 012b14b3..db07f2c5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -55,13 +55,14 @@ About the past changelog entries, see [old CHANGELOG](CHANGELOG-v4.md) instead.
 * systemd-journal v2.1.1 (update)
 * td-client v1.0.8
 * webhdfs v0.10.2
+* rexml v3.4.4 (update)
 
 On Windows
 
 * fluent-plugin-parser-winevt_xml v0.2.8 (update)
 * fluent-plugin-windows-exporter v1.0.0
 * winevt_c v0.10.2
-* nokogiri v1.16.8
+* nokogiri v1.18.10 (update)
 
 ## Release v5.0.7 - 2025/05/14
 
diff --git a/fluent-package/Gemfile b/fluent-package/Gemfile
index 0a570f96..1efde971 100644
--- a/fluent-package/Gemfile
+++ b/fluent-package/Gemfile
@@ -70,6 +70,7 @@ gem "fluent-diagtool", "1.0.5"
 gem "td", "0.17.1"
 gem "td-client", "1.0.8"
 gem "fluent-plugin-td", "1.2.0"
+gem "rexml", "3.4.4"
 gem "webhdfs", "0.10.2"
 gem "fluent-plugin-webhdfs", "1.5.0"
 gem "fluent-plugin-record-modifier", "2.1.1"
@@ -87,7 +88,7 @@ gem "fluent-plugin-opensearch", "1.1.4"
 windows_platforms = [:mingw, :x64_mingw] # :mswin
 gem "ffi", "1.15.5", platforms: windows_platforms
 gem "ffi-win32-extensions", "1.0.4", platforms: windows_platforms
-gem "nokogiri", "1.16.8", platforms: windows_platforms
+gem "nokogiri", "1.18.10", platforms: windows_platforms
 gem "win32-event", "0.6.3", platforms: windows_platforms
 gem "win32-ipc", "0.7.0", platforms: windows_platforms
 # Use officially released version when PR was merged and released.
diff --git a/fluent-package/Gemfile.lock b/fluent-package/Gemfile.lock
index ee22fc82..135458f8 100644
--- a/fluent-package/Gemfile.lock
+++ b/fluent-package/Gemfile.lock
@@ -203,7 +203,7 @@ GEM
     msgpack (1.7.5)
     multi_json (1.15.0)
     nio4r (2.6.1)
-    nokogiri (1.16.8)
+    nokogiri (1.18.10)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     oj (3.16.5)
@@ -235,8 +235,7 @@ GEM
       ffi (~> 1.15)
       mini_portile2 (~> 2.6)
       rake (> 12)
-    rexml (3.2.9)
-      strscan
+    rexml (3.4.4)
     ruby-kafka (1.5.0)
       digest-crc
     ruby-progressbar (1.13.0)
@@ -246,7 +245,6 @@ GEM
       sigdump (~> 0.2.2)
     sigdump (0.2.5)
     strptime (0.2.5)
-    strscan (1.0.3)
     systemd-journal (2.1.1)
       ffi (~> 1.9)
     td (0.17.1)
@@ -335,13 +333,14 @@ DEPENDENCIES
   jmespath (= 1.6.2)
   mini_portile2 (= 2.8.9)
   msgpack (= 1.7.5)
-  nokogiri (= 1.16.8)
+  nokogiri (= 1.18.10)
   oj (= 3.16.5)
   opensearch-ruby (= 2.1.0)
   openssl (= 3.3.0)
   prometheus-client (= 2.1.0)
   rake
   rdkafka (= 0.12.0)
+  rexml (= 3.4.4)
   ruby-kafka (= 1.5.0)
   serverengine (= 2.3.2)
   sigdump (= 0.2.5)