diff --git a/saas/Gemfile b/saas/Gemfile
index bb3829719..ae814a2ef 100644
--- a/saas/Gemfile
+++ b/saas/Gemfile
@@ -5,5 +5,6 @@ git_source(:bc) { |repo| "https://github.com/basecamp/#{repo}" }
 gem "queenbee", bc: "queenbee-plugin", ref: "14312a940471e20617b38cdec7c092a01567d18b"
 gem "rails_structured_logging", bc: "rails-structured-logging"
 gem "activeresource", require: "active_resource" # needed by queenbee
+gem "actionpack-xml_parser" # needed by queenbee for XML request body parsing
 
 gem "rubocop-rails-omakase", require: false
diff --git a/saas/Gemfile.lock b/saas/Gemfile.lock
index 16c647b27..1a9426209 100644
--- a/saas/Gemfile.lock
+++ b/saas/Gemfile.lock
@@ -51,6 +51,9 @@ GEM
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
       useragent (~> 0.16)
+    actionpack-xml_parser (2.0.1)
+      actionpack (>= 5.0)
+      railties (>= 5.0)
     actiontext (8.1.1)
       action_text-trix (~> 2.1.15)
       actionpack (= 8.1.1)
@@ -282,6 +285,7 @@ PLATFORMS
   x86_64-linux-musl
 
 DEPENDENCIES
+  actionpack-xml_parser
   activeresource
   queenbee!
   rails_structured_logging!