diff --git a/Gemfile b/Gemfile
index 4ca45197d..3eb28dcd4 100644
--- a/Gemfile
+++ b/Gemfile
@@ -38,7 +38,7 @@ gem "jquery-ui-rails", "~> 6.0.1"
 gem "kaminari", "~> 1.2.2"
 gem "leaflet-rails", "~> 1.9.3"
 gem "mini_magick", "~> 4.11.0"
-gem "omniauth", "~> 2.1.0"
+gem "omniauth", "~> 2.1.1"
 gem "omniauth-facebook", "~> 9.0.0"
 gem "omniauth-google-oauth2", "~> 1.0.1"
 gem "omniauth-rails_csrf_protection", "~> 1.0.1"
diff --git a/Gemfile.lock b/Gemfile.lock
index 13e39b2bd..e3f6c0260 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -382,7 +382,7 @@ GEM
     octokit (4.25.1)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
-    omniauth (2.1.0)
+    omniauth (2.1.1)
       hashie (>= 3.4.6)
       rack (>= 2.2.3)
       rack-protection
@@ -443,8 +443,8 @@ GEM
     rack (2.2.8)
     rack-accept (0.4.5)
       rack (>= 0.4)
-    rack-protection (2.2.2)
-      rack
+    rack-protection (3.1.0)
+      rack (~> 2.2, >= 2.2.4)
     rack-proxy (0.7.6)
       rack
     rack-test (2.1.0)
@@ -723,7 +723,7 @@ DEPENDENCIES
   letter_opener_web (~> 2.0.0)
   mdl (~> 0.11.0)
   mini_magick (~> 4.11.0)
-  omniauth (~> 2.1.0)
+  omniauth (~> 2.1.1)
   omniauth-facebook (~> 9.0.0)
   omniauth-google-oauth2 (~> 1.0.1)
   omniauth-rails_csrf_protection (~> 1.0.1)