#ruby#rexml has had 11 security patches since May. Four in August alone. Getting dinged by #snyk to upgrade dependencies is death by 1000 mosquito bites. We don't use it directly. It's an indirect dependency. *grumbleface*
I saw that #rubocop has removed rexml as a dependency as of 1.66.0.
