diff --git a/.changeset/renovate-de04315.md b/.changeset/renovate-de04315.md
new file mode 100644
index 0000000000..9b8f5bd72c
--- /dev/null
+++ b/.changeset/renovate-de04315.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-code-coverage-backend': patch
+---
+
+Updated dependency `xml2js` to `^0.6.0`.
diff --git a/plugins/code-coverage-backend/package.json b/plugins/code-coverage-backend/package.json
index d9857e7b7c..b965e2914f 100644
--- a/plugins/code-coverage-backend/package.json
+++ b/plugins/code-coverage-backend/package.json
@@ -44,7 +44,7 @@
     "@types/supertest": "^2.0.8",
     "msw": "^1.0.0",
     "supertest": "^6.1.6",
-    "xml2js": "^0.5.0"
+    "xml2js": "^0.6.0"
   },
   "files": [
     "dist",
diff --git a/yarn.lock b/yarn.lock
index bb25e3b9ed..6a9a8f6b0d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6225,7 +6225,7 @@ __metadata:
     supertest: ^6.1.6
     uuid: ^8.3.2
     winston: ^3.2.1
-    xml2js: ^0.5.0
+    xml2js: ^0.6.0
     yn: ^4.0.0
   languageName: unknown
   linkType: soft
@@ -41677,13 +41677,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"xml2js@npm:^0.5.0":
-  version: 0.5.0
-  resolution: "xml2js@npm:0.5.0"
+"xml2js@npm:^0.6.0":
+  version: 0.6.0
+  resolution: "xml2js@npm:0.6.0"
   dependencies:
     sax: ">=0.6.0"
     xmlbuilder: ~11.0.0
-  checksum: 1aa71d62e5bc2d89138e3929b9ea46459157727759cbc62ef99484b778641c0cd21fb637696c052d901a22f82d092a3e740a16b4ce218e81ac59b933535124ea
+  checksum: 437f353fd66d367bf158e9555a0625df9965d944e499728a5c6bc92a54a2763179b144f14b7e1c725040f56bbd22b0fa6cfcb09ec4faf39c45ce01efe631f40b
   languageName: node
   linkType: hard