diff --git a/Gemfile b/Gemfile
index 6599989fe..507c3ce02 100644
--- a/Gemfile
+++ b/Gemfile
@@ -16,7 +16,7 @@ gem 'devise', git: 'https://github.com/plataformatec/devise'
 gem 'htmlentities', '~> 4.3', '>= 4.3.4'
 gem 'httparty'
 gem 'jwt'
-gem 'loofah', '~> 2.2.1', '>= 2.2.3'
+gem 'loofah', '~> 2.3.1'
 gem 'mysql2'
 gem 'octokit', '~> 4.0'
 gem 'paperclip', '~> 6.0.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 23dcd7f0a..f5be30161 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -162,7 +162,7 @@ GEM
     connection_pool (2.2.2)
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
-    crass (1.0.4)
+    crass (1.0.5)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
     docile (1.3.2)
@@ -221,7 +221,7 @@ GEM
     jwt (2.2.1)
     launchy (2.4.3)
       addressable (~> 2.3)
-    loofah (2.2.3)
+    loofah (2.3.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -253,7 +253,7 @@ GEM
       net-ssh (>= 2.6.5, < 6.0.0)
     net-ssh (5.2.0)
     nio4r (2.5.2)
-    nokogiri (1.10.4)
+    nokogiri (1.10.5)
       mini_portile2 (~> 2.4.0)
     octokit (4.14.0)
       sawyer (~> 0.8.0, >= 0.5.3)
@@ -455,7 +455,7 @@ DEPENDENCIES
   jbuilder (~> 2.0)
   jquery-rails
   jwt
-  loofah (~> 2.2.1, >= 2.2.3)
+  loofah (~> 2.3.1)
   meta_request
   mysql2
   octokit (~> 4.0)