diff --git a/Gemfile b/Gemfile
index 8d30d3f4f..19e4592f4 100644
--- a/Gemfile
+++ b/Gemfile
@@ -78,7 +78,7 @@ gem "activerecord-import", "1.4.0"
 
 # File uploading
 
-gem "carrierwave", "2.2.2"
+gem "carrierwave", "2.2.4"
 gem "fog-aws",     "3.14.0"
 gem "mini_magick", "4.11.0"
 
diff --git a/Gemfile.lock b/Gemfile.lock
index bb7eb5083..2795119ef 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -106,7 +106,7 @@ GEM
       rack-test (>= 0.6.3)
       regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
-    carrierwave (2.2.2)
+    carrierwave (2.2.4)
       activemodel (>= 5.0.0)
       activesupport (>= 5.0.0)
       addressable (~> 2.6)
@@ -140,7 +140,7 @@ GEM
     chunky_png (1.4.0)
     citrus (3.0.2)
     coderay (1.1.3)
-    concurrent-ruby (1.1.10)
+    concurrent-ruby (1.2.2)
     configurate (0.5.0)
     connection_pool (2.2.5)
     crack (0.4.5)
@@ -360,7 +360,7 @@ GEM
       mime-types (~> 3.0)
       multi_xml (>= 0.5.2)
     httpclient (2.8.3)
-    i18n (1.12.0)
+    i18n (1.14.1)
       concurrent-ruby (~> 1.0)
     idn-ruby (0.1.0)
     image_processing (1.12.2)
@@ -682,7 +682,7 @@ GEM
       actionpack (>= 5.2)
       activesupport (>= 5.2)
       sprockets (>= 3.0.0)
-    ssrf_filter (1.0.7)
+    ssrf_filter (1.1.1)
     state_machines (0.5.0)
     string-direction (1.2.2)
     swd (1.3.0)
@@ -722,7 +722,7 @@ GEM
       unf (~> 0.1.0)
     typhoeus (1.4.0)
       ethon (>= 0.9.0)
-    tzinfo (2.0.5)
+    tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unf (0.1.4)
       unf_ext
@@ -761,7 +761,7 @@ GEM
     yajl-ruby (1.4.3)
     yard (0.9.28)
       webrick (~> 1.7.0)
-    zeitwerk (2.6.0)
+    zeitwerk (2.6.8)
 
 PLATFORMS
   ruby
@@ -778,7 +778,7 @@ DEPENDENCIES
   bootstrap-sass (= 3.4.1)
   bootstrap-switch-rails (= 3.3.3)
   capybara (= 3.35.3)
-  carrierwave (= 2.2.2)
+  carrierwave (= 2.2.4)
   chrome_remote (= 0.3.0)
   configurate (= 0.5.0)
   cucumber-api-steps (= 0.14)