diff --git a/packaging/Gemfile b/packaging/Gemfile
index 5615135..346b5ca 100644
--- a/packaging/Gemfile
+++ b/packaging/Gemfile
@@ -6,7 +6,7 @@ gem "pact-mock_service", "3.9.0"
 gem "pact-provider-verifier", "1.36.1"
 gem "pact_broker-client", "1.65.0"
 gem "webrick", "1.3.1" # Later versions require Ruby 2.3
-gem "rack", "~>2.1.4"
+gem "rack", "~>2.2.6"
 gem "json", "2.0.4"
 
 # Locking this until we have given rack-test 3.0 a good shake out in pure Ruby
diff --git a/packaging/Gemfile.lock b/packaging/Gemfile.lock
index 03a5195..2e44c70 100644
--- a/packaging/Gemfile.lock
+++ b/packaging/Gemfile.lock
@@ -87,7 +87,7 @@ GEM
       term-ansicolor (~> 1.7)
       thor (>= 0.20, < 2.0)
     parslet (2.0.0)
-    rack (2.1.4.1)
+    rack (2.2.6.4)
     rack-proxy (0.7.2)
       rack
     rack-reverse-proxy (0.12.0)
@@ -133,7 +133,7 @@ DEPENDENCIES
   pact-mock_service (= 3.9.0)
   pact-provider-verifier (= 1.36.1)
   pact_broker-client (= 1.65.0)
-  rack (~> 2.1.4)
+  rack (~> 2.2.6)
   rack-test (>= 0.6.3, < 2.0.0)
   webrick (= 1.3.1)