diff --git a/Gemfile b/Gemfile
index cbe3aef..8e5f2aa 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,7 +13,7 @@ gem 'will_paginate-bootstrap'
 gem 'rack-cors', :require => 'rack/cors'
 gem 'octokit', '~> 4.0'
 gem 'sem_ver'
-gem 'loofah', '~> 2.3.1'
+gem 'loofah', '~> 2.19.1'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
 gem 'rails', '~> 5.1.0.beta1'
diff --git a/Gemfile.lock b/Gemfile.lock
index c06e8ab..c21fb88 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -142,7 +142,7 @@ GEM
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
       ruby_dep (~> 1.2)
-    loofah (2.3.1)
+    loofah (2.19.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.0)
@@ -152,7 +152,7 @@ GEM
       mime-types-data (~> 3.2015)
     mime-types-data (3.2018.0812)
     mini_mime (1.0.1)
-    mini_portile2 (2.5.3)
+    mini_portile2 (2.8.0)
     minitest (5.14.4)
     multi_json (1.13.1)
     multipart-post (2.1.1)
@@ -161,8 +161,8 @@ GEM
       net-ssh (>= 2.6.5)
     net-ssh (5.0.2)
     nio4r (2.3.1)
-    nokogiri (1.11.7)
-      mini_portile2 (~> 2.5.0)
+    nokogiri (1.13.10)
+      mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
     octokit (4.11.0)
       sawyer (~> 0.8.0, >= 0.5.3)
@@ -170,7 +170,7 @@ GEM
     public_suffix (4.0.6)
     puma (4.3.8)
       nio4r (~> 2.0)
-    racc (1.5.2)
+    racc (1.6.1)
     rack (2.1.4)
     rack-cors (1.0.5)
       rack (>= 1.6.0)
@@ -282,7 +282,7 @@ DEPENDENCIES
   devise
   jbuilder (~> 2.5)
   listen (>= 3.0.5, < 3.2)
-  loofah (~> 2.3.1)
+  loofah (~> 2.19.1)
   mysql2
   octokit (~> 4.0)
   puma (~> 4.3)