diff --git a/fz_td_recipe/utils.py b/fz_td_recipe/utils.py
index 570f193..2803b34 100644
--- a/fz_td_recipe/utils.py
+++ b/fz_td_recipe/utils.py
@@ -11,7 +11,7 @@ def load_xml(recipe):
     """Extract the xml root from `recipe`, which may either be a path or string."""
     try:
         # Parse the given XML file:
-        parser = etree.XMLParser(remove_comments=True)
+        parser = etree.XMLParser(remove_comments=True, resolve_entities=True)
         tree = etree.parse(recipe, parser)
     except (etree.XMLSyntaxError, etree.ParserError) as err:
         logger.warning("could not parse xml of recipe '%s'", recipe)
diff --git a/pyproject.toml b/pyproject.toml
index 6d60b03..3bb9bb6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
     "click",
     "jsonschema",
     "libsonata",
-    "lxml<5",
+    "lxml>=5",
     "numpy",
     "pandas[pyarrow]",
     "pyyaml",