diff --git a/Gemfile b/Gemfile
index 952d42dfa..ce1491990 100644
--- a/Gemfile
+++ b/Gemfile
@@ -24,7 +24,7 @@ gem 'validates_email_format_of', '1.6.3' # validates email against RFC 2822 and
 
 # 0.7.3 is the latest for Rails 4.2, however, it is absent on Rubygems server
 # https://github.com/huacnlee/rails-settings-cached/issues/165
-gem 'nokogiri', '~> 1.11.5'
+gem 'nokogiri', '~> 1.11.6'
 
 # style
 gem 'bootstrap-sass', '~> 3.4'
diff --git a/Gemfile.lock b/Gemfile.lock
index 807b81892..4282d8661 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -292,7 +292,8 @@ GEM
       nokogiri (~> 1)
       rake
     mini_mime (1.0.3)
-    mini_portile2 (2.5.1)
+    mini_portile2 (2.5.2)
+      net-ftp (~> 0.1)
     minitest (5.14.4)
     monetize (1.9.4)
       money (~> 6.12)
@@ -307,12 +308,16 @@ GEM
     multi_json (1.15.0)
     mustermann (1.1.1)
       ruby2_keywords (~> 0.0.1)
+    net-ftp (0.1.2)
+      net-protocol
+      time
+    net-protocol (0.1.0)
     netrc (0.11.0)
     nio4r (2.5.7)
-    nokogiri (1.11.5)
+    nokogiri (1.11.6)
       mini_portile2 (~> 2.5.0)
       racc (~> 1.4)
-    nokogiri (1.11.5-x86_64-linux)
+    nokogiri (1.11.6-x86_64-linux)
       racc (~> 1.4)
     nori (2.6.0)
     omniauth (1.9.1)
@@ -462,6 +467,7 @@ GEM
     temple (0.8.2)
     thor (1.1.0)
     tilt (2.0.10)
+    time (0.1.0)
     truemail (2.4.2)
       simpleidn (~> 0.2.1)
     tzinfo (2.0.4)
@@ -547,7 +553,7 @@ DEPENDENCIES
   mimemagic (= 0.4.3)
   minitest (~> 5.14)
   money-rails
-  nokogiri (~> 1.11.5)
+  nokogiri (~> 1.11.6)
   omniauth
   omniauth-rails_csrf_protection
   omniauth-tara!