diff --git a/package.json b/package.json
index 16593a294..8dc23bc5d 100644
--- a/package.json
+++ b/package.json
@@ -131,7 +131,7 @@
     "proj4": "2.6.3",
     "promise-polyfill": "8.2.0",
     "three": "0.121.1",
-    "xlsx": "0.16.8",
+    "xlsx": "0.16.9",
     "xml-js": "1.6.11"
   },
   "pre-commit": [
diff --git a/src/classic/package.json b/src/classic/package.json
index 80e3df24e..b654ac1ab 100644
--- a/src/classic/package.json
+++ b/src/classic/package.json
@@ -14,7 +14,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "mapv": "2.0.62",
-    "xlsx": "0.16.8",
+    "xlsx": "0.16.9",
     "@supermap/iclient-common": "10.1.1"
   }
 }
diff --git a/src/leaflet/package.json b/src/leaflet/package.json
index 46c77d5ac..9afe57156 100644
--- a/src/leaflet/package.json
+++ b/src/leaflet/package.json
@@ -23,6 +23,6 @@
     "jsonsql": "0.2.5",
     "pbf": "3.2.1",
     "proj4": "2.6.3",
-    "xlsx": "0.16.8"
+    "xlsx": "0.16.9"
   }
 }
diff --git a/src/mapboxgl/package.json b/src/mapboxgl/package.json
index 0034144c4..855e9385b 100644
--- a/src/mapboxgl/package.json
+++ b/src/mapboxgl/package.json
@@ -18,7 +18,7 @@
     "mapv": "2.0.62",
     "mapbox-gl": "1.12.0",
     "three": "0.121.1",
-    "xlsx": "0.16.8",
+    "xlsx": "0.16.9",
     "@supermap/iclient-common": "10.1.1",
     "canvg": "3.0.7",
     "xml-js": "1.6.11"
diff --git a/src/openlayers/package.json b/src/openlayers/package.json
index 3f66ec4a2..82aa6f08c 100644
--- a/src/openlayers/package.json
+++ b/src/openlayers/package.json
@@ -20,7 +20,7 @@
     "ol": "6.4.3",
     "@supermap/iclient-common": "10.1.1",
     "proj4": "2.6.3",
-    "xlsx": "0.16.8",
+    "xlsx": "0.16.9",
     "canvg": "3.0.7",
     "lodash.remove": "^4.7.0"
   }