diff --git a/Gemfile b/Gemfile
index 97b1a5be2..44863531f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -25,7 +25,7 @@ gem 'validates_email_format_of', '1.6.3' # validates email against RFC 2822 and
 
 # 0.7.3 is the latest for Rails 4.2, however, it is absent on Rubygems server
 # https://github.com/huacnlee/rails-settings-cached/issues/165
-gem 'nokogiri', '~> 1.12.5'
+gem 'nokogiri', '~> 1.13.0'
 
 # style
 gem 'bootstrap-sass', '~> 3.4'
diff --git a/Gemfile.lock b/Gemfile.lock
index e3823e656..987e3303d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -303,7 +303,7 @@ GEM
       nokogiri (~> 1)
       rake
     mini_mime (1.1.1)
-    mini_portile2 (2.6.1)
+    mini_portile2 (2.7.1)
     minitest (5.15.0)
     monetize (1.9.4)
       money (~> 6.12)
@@ -324,10 +324,10 @@ GEM
       newrelic_rpm (= 8.1.0)
     newrelic_rpm (8.1.0)
     nio4r (2.5.8)
-    nokogiri (1.12.5)
-      mini_portile2 (~> 2.6.1)
+    nokogiri (1.13.0)
+      mini_portile2 (~> 2.7.0)
       racc (~> 1.4)
-    nokogiri (1.12.5-x86_64-linux)
+    nokogiri (1.13.0-x86_64-linux)
       racc (~> 1.4)
     nori (2.6.0)
     omniauth (1.9.1)
@@ -367,7 +367,7 @@ GEM
       erubis
       que (~> 0.8)
       sinatra
-    racc (1.5.2)
+    racc (1.6.0)
     rack (2.2.3)
     rack-oauth2 (1.16.0)
       activesupport
@@ -568,7 +568,7 @@ DEPENDENCIES
   money-rails
   newrelic-infinite_tracing
   newrelic_rpm
-  nokogiri (~> 1.12.5)
+  nokogiri (~> 1.13.0)
   omniauth
   omniauth-rails_csrf_protection
   omniauth-tara!