diff --git a/overlay_window.py b/overlay_window.py
index c86e70a..946f9f1 100644
--- a/overlay_window.py
+++ b/overlay_window.py
@@ -448,7 +448,7 @@ def eventFilter(self, obj, event):
 
 def _load_svg_symbols():
     try:
-        import xml.etree.ElementTree as ET
+        import defusedxml.ElementTree as ET
         # Resolve path to static/icons/lucide-sprite.svg
         base_dir = os.path.dirname(os.path.abspath(__file__))
         svg_path = os.path.join(base_dir, "static", "icons", "lucide-sprite.svg")
diff --git a/requirements.txt b/requirements.txt
index 716265d..6a94663 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -15,6 +15,7 @@ pywebview
 python-osc
 zeroconf
 PySide6
+defusedxml
 vrchat_oscquery @ git+https://github.com/theepicsnail/vrchat_oscquery@main
 # streamlink
 # 锁版本：不同 PyInstaller 版本的 bootloader 有不同的杀软误报情况，