diff --git a/Gemfile b/Gemfile
index 02e5e309f7..a0dce8dbcf 100644
--- a/Gemfile
+++ b/Gemfile
@@ -144,7 +144,7 @@ group :test do
   gem "erb_lint", :require => false
   gem "factory_bot_rails"
   gem "minitest", "~> 5.1"
-  gem "puma", "~> 5.3"
+  gem "puma", "~> 5.6"
   gem "rails-controller-testing"
   gem "rubocop"
   gem "rubocop-minitest"
diff --git a/Gemfile.lock b/Gemfile.lock
index b4aca513ae..de69c3bf19 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -362,7 +362,7 @@ GEM
     popper_js (1.16.0)
     progress (3.6.0)
     public_suffix (4.0.6)
-    puma (5.6.2)
+    puma (5.6.4)
       nio4r (~> 2.0)
     quad_tile (1.0.1)
     r2 (0.2.7)
@@ -569,7 +569,7 @@ DEPENDENCIES
   omniauth-windowslive
   openstreetmap-deadlock_retry (>= 1.3.1)
   pg
-  puma (~> 5.3)
+  puma (~> 5.6)
   quad_tile (~> 1.0.1)
   r2 (~> 0.2.7)
   rack-cors