diff --git a/Gemfile.lock b/Gemfile.lock
index 88c8d9ed..fb090626 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -106,12 +106,11 @@ GEM
       rack (>= 1.0.0)
       rack-test (>= 0.5.4)
       xpath (>= 2.0, < 4.0)
-    carrierwave (0.11.2)
-      activemodel (>= 3.2.0)
-      activesupport (>= 3.2.0)
-      json (>= 1.7)
+    carrierwave (1.3.4)
+      activemodel (>= 4.0.0)
+      activesupport (>= 4.0.0)
       mime-types (>= 1.16)
-      mimemagic (>= 0.3.0)
+      ssrf_filter (~> 1.0, < 1.1.0)
     case_transform (0.2)
       activesupport
     childprocess (0.9.0)
@@ -223,7 +222,7 @@ GEM
     jquery-rails (2.0.3)
       railties (>= 3.1.0, < 5.0)
       thor (~> 0.14)
-    json (1.8.6)
+    json (2.6.3)
     json-jwt (1.12.0)
       activesupport (>= 4.2)
       aes_key_wrap
@@ -245,14 +244,11 @@ GEM
     mime-types (3.5.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2023.1003)
-    mimemagic (0.4.3)
-      nokogiri (~> 1)
-      rake
     mini_magick (3.8.1)
       subexec (~> 0.2.1)
     mini_mime (1.1.2)
     mini_portile2 (2.4.0)
-    minitest (5.15.0)
+    minitest (5.20.0)
     mono_logger (1.1.2)
     msgpack (0.7.6)
     multi_json (1.15.0)
@@ -416,6 +412,7 @@ GEM
       actionpack (>= 3.0)
       activesupport (>= 3.0)
       sprockets (>= 2.8, < 4.0)
+    ssrf_filter (1.0.8)
     subexec (0.2.3)
     text (1.3.1)
     thor (0.20.3)
@@ -478,7 +475,6 @@ DEPENDENCIES
   jquery-rails (~> 2.0.2)
   knockoutjs-rails (~> 3.2.0)
   lodash-rails
-  loofah (= 2.20.0)
   machinist (= 1.0.6)
   mini_magick
   msgpack (~> 0.7.5)