diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
index 8ddd516..48ef472 100644
--- a/npm-shrinkwrap.json
+++ b/npm-shrinkwrap.json
@@ -1,6 +1,6 @@
 {
   "name": "prefer",
-  "version": "0.5.10",
+  "version": "0.5.11",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -2287,9 +2287,9 @@
       "dev": true
     },
     "xml2js": {
-      "version": "0.4.23",
-      "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz",
-      "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==",
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz",
+      "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
       "requires": {
         "sax": ">=0.6.0",
         "xmlbuilder": "~11.0.0"
diff --git a/package.json b/package.json
index 52f5a3c..cde39c8 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "q": "^1.5.1",
     "step": ">=1.0.0",
     "winston": "^3.2.1",
-    "xml2js": "^0.4.23",
+    "xml2js": "^0.5.0",
     "yargs": "^15.3.1"
   },
   "description": "Configuration management for NodeJS",