diff --git a/db-init/build.gradle b/db-init/build.gradle
index b04ae025a..0c51b8363 100644
--- a/db-init/build.gradle
+++ b/db-init/build.gradle
@@ -16,7 +16,7 @@ dependencies {
   //  flywayMigration platform("gov.va.starter:starter-bom:${starter_boot_version}")
   flywayMigration "org.postgresql:postgresql:${postgresql_version}"
   constraints {
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.18.0'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.18.1'
   }
 }
 
diff --git a/dev-tools/Dockerfile b/dev-tools/Dockerfile
index 63c5b1566..cb3d21a1c 100644
--- a/dev-tools/Dockerfile
+++ b/dev-tools/Dockerfile
@@ -1,5 +1,5 @@
 # Use the official AWS CLI image for the first stage
-FROM amazon/aws-cli:2.18.15 as awscli
+FROM amazon/aws-cli:2.18.16 as awscli
 
 # Use the bitnami/minideb:bookworm as the base image for the second stage
 FROM bitnami/minideb:bookworm
diff --git a/svc-bgs-api/src/Gemfile b/svc-bgs-api/src/Gemfile
index 8d60464fd..c357e2410 100644
--- a/svc-bgs-api/src/Gemfile
+++ b/svc-bgs-api/src/Gemfile
@@ -8,7 +8,7 @@ gem 'bunny', '>= 2.13.0'
 gem 'activesupport', '~> 6.0'
 gem 'bgs_ext', git: 'https://github.com/department-of-veterans-affairs/bgs-ext.git', require: 'bgs'
 gem 'datadog_api_client', '>=2.23.0'
-gem 'rexml', '~> 3.3', '>= 3.3.6'
+gem 'rexml', '~> 3.3'
 gem 'async', '>= 2.17.0'
 
 group :development, :test do
diff --git a/svc-bgs-api/src/Gemfile.lock b/svc-bgs-api/src/Gemfile.lock
index 10e54b5cb..5c707a7a5 100644
--- a/svc-bgs-api/src/Gemfile.lock
+++ b/svc-bgs-api/src/Gemfile.lock
@@ -97,8 +97,7 @@ GEM
     racc (1.8.0)
     rack (2.2.9)
     rbtree (0.4.6)
-    rexml (3.3.6)
-      strscan
+    rexml (3.3.9)
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
@@ -125,7 +124,6 @@ GEM
     sorted_set (1.0.3)
       rbtree
       set (~> 1.0)
-    strscan (3.1.0)
     timeout (0.4.1)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
@@ -147,7 +145,7 @@ DEPENDENCIES
   bunny (>= 2.13.0)
   cgi (~> 0.3.6)
   datadog_api_client (>= 2.23.0)
-  rexml (~> 3.3, >= 3.3.6)
+  rexml (~> 3.3)
   rspec
 
 RUBY VERSION