diff --git a/Gemfile b/Gemfile
index 1a46f0399c7..b4145e080f4 100644
--- a/Gemfile
+++ b/Gemfile
@@ -175,7 +175,7 @@ gem 'diffy', '~> 3.3'
 gem 'diff_match_patch', '~> 0.1.0'
 
 # Application server
-gem 'rack', '~> 2.2.3'
+gem 'rack', '~> 2.2.6'
 # https://github.com/sharpstone/rack-timeout/blob/master/README.md#rails-apps-manually
 gem 'rack-timeout', '~> 0.5.1', require: 'rack/timeout/base'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index d5d700e4721..c4f02979a1b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -923,7 +923,7 @@ GEM
     pyu-ruby-sasl (0.0.3.3)
     raabro (1.1.6)
     racc (1.5.2)
-    rack (2.2.3)
+    rack (2.2.6.2)
     rack-accept (0.4.5)
       rack (>= 0.4)
     rack-attack (6.3.0)
@@ -1519,7 +1519,7 @@ DEPENDENCIES
   pry-remote
   puma (~> 5.1.1)
   puma_worker_killer (~> 0.3.1)
-  rack (~> 2.2.3)
+  rack (~> 2.2.6)
   rack-attack (~> 6.3.0)
   rack-cors (~> 1.0.6)
   rack-oauth2 (~> 1.16.0)