diff --git a/requirements/base.txt b/requirements/base.txt
index 0b06c2da..48a786c4 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -43,8 +43,10 @@ jmespath==1.0.1
     #   botocore
 lazy==1.6
     # via xblock
-lxml==5.2.1
-    # via xblock
+lxml==4.9.4
+    # via
+    #   -c requirements/constraints.txt
+    #   xblock
 mako==1.3.3
     # via xblock
 markupsafe==2.1.5
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 84a58bca..1819adba 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -15,3 +15,6 @@ pylint==2.4.2
 
 # For python greater than or equal to 3.9 backports.zoneinfo causing failures
 backports.zoneinfo; python_version<"3.9"
+
+# https://github.com/openedx/xblock-sdk/issues/347
+lxml<5.0.0
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 78f07a9d..36565d6c 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -172,8 +172,9 @@ lazy-object-proxy==1.4.3
     # via
     #   -r requirements/quality.txt
     #   astroid
-lxml==5.2.1
+lxml==4.9.4
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/quality.txt
     #   edx-i18n-tools
     #   xblock
@@ -413,7 +414,7 @@ xblock[django]==3.1.0
     # via
     #   -r requirements/quality.txt
     #   xblock-sdk
-xblock-sdk==0.7.0
+xblock-sdk==0.10.0
     # via -r requirements/quality.txt
 zipp==3.18.1
     # via
diff --git a/requirements/quality.txt b/requirements/quality.txt
index 2be1417a..4b13d842 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -133,8 +133,9 @@ lazy==1.6
     #   xblock
 lazy-object-proxy==1.4.3
     # via astroid
-lxml==5.2.1
+lxml==4.9.4
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/test.txt
     #   edx-i18n-tools
     #   xblock
@@ -320,7 +321,7 @@ xblock[django]==3.1.0
     # via
     #   -r requirements/test.txt
     #   xblock-sdk
-xblock-sdk==0.7.0
+xblock-sdk==0.10.0
     # via -r requirements/test.txt
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements/test.in b/requirements/test.in
index f854691d..d5bb5859 100644
--- a/requirements/test.in
+++ b/requirements/test.in
@@ -12,4 +12,4 @@ openedx-django-pyfs       # required by the workbench
 
 edx-i18n-tools            # For i18n_tool dummy
 
-xblock-sdk                # workbench
+xblock-sdk>0.7            # workbench
diff --git a/requirements/test.txt b/requirements/test.txt
index 8b86e100..c5170af1 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -90,8 +90,9 @@ lazy==1.6
     # via
     #   -r requirements/base.txt
     #   xblock
-lxml==5.2.1
+lxml==4.9.4
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   edx-i18n-tools
     #   xblock
@@ -222,7 +223,7 @@ xblock[django]==3.1.0
     # via
     #   -r requirements/base.txt
     #   xblock-sdk
-xblock-sdk==0.7.0
+xblock-sdk==0.10.0
     # via -r requirements/test.in
 
 # The following packages are considered to be unsafe in a requirements file: