diff --git a/requirements.txt b/requirements.txt
index c2352bbc8..d9db3a7a3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -96,7 +96,7 @@ logilab-common==1.4.1
 
 # LXML
 #   Security: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=lxml
-lxml==4.3.0
+lxml==4.6.5
 
 # Mercurial
 #   CVE-2017-9462