diff --git a/Gemfile b/Gemfile
index 2df732d3375..75163465c9b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -21,7 +21,7 @@ gem 'membrane', '~> 1.0'
 gem 'httpclient'
 gem 'steno'
 gem 'cloudfront-signer'
-gem 'vcap_common', '~> 4.0'
+gem 'vcap_common', '~> 4.0.3'
 gem 'allowy'
 gem 'loggregator_emitter', '~> 5.0'
 gem 'delayed_job_sequel', git: 'https://github.com/cloudfoundry/delayed_job_sequel.git'
diff --git a/Gemfile.lock b/Gemfile.lock
index 3fdc818e1e8..1a8541fdda0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -92,13 +92,13 @@ GEM
       activesupport (>= 3.0, < 5.0)
     diff-lcs (1.2.5)
     docile (1.1.5)
-    em-http-request (1.1.2)
+    em-http-request (1.1.3)
       addressable (>= 2.3.4)
-      cookiejar
+      cookiejar (<= 0.3.0)
       em-socksify (>= 0.3)
       eventmachine (>= 1.0.3)
       http_parser.rb (>= 0.6.0)
-    em-socksify (0.3.0)
+    em-socksify (0.3.1)
       eventmachine (>= 1.0.0.beta.4)
     erubis (2.7.0)
     eventmachine (1.0.9.1)
@@ -249,7 +249,7 @@ GEM
     parser (2.3.0.1)
       ast (~> 2.2)
     pg (0.16.0)
-    posix-spawn (0.3.9)
+    posix-spawn (0.3.11)
     powerpack (0.1.1)
     pry (0.10.1)
       coderay (~> 1.1.0)
@@ -360,7 +360,7 @@ GEM
       unf_ext
     unf_ext (0.0.6)
     uuidtools (2.1.5)
-    vcap_common (4.0.2)
+    vcap_common (4.0.3)
       addressable (~> 2.2)
       cookiejar (<= 0.3.0)
       em-http-request (~> 1.0)
@@ -369,7 +369,7 @@ GEM
       membrane (~> 1.0)
       mime-types
       multipart-post
-      nats (>= 0.5.0.beta.12, < 0.6)
+      nats (>= 0.5.0.beta.16, < 0.6)
       posix-spawn (~> 0.3.6)
       squash_ruby
       steno
@@ -439,7 +439,7 @@ DEPENDENCIES
   timecop
   unf
   vcap-concurrency!
-  vcap_common (~> 4.0)
+  vcap_common (~> 4.0.3)
   webmock
   yajl-ruby