diff --git a/Gemfile b/Gemfile
index c1f934b24..c2d890c11 100644
--- a/Gemfile
+++ b/Gemfile
@@ -201,7 +201,7 @@ gem "logging-rails", "0.6.0", require: "logging/rails"
 
 # Reading and writing zip files
 
-gem "rubyzip", "1.2.2", require: "zip"
+gem "rubyzip", "1.3.0", require: "zip"
 
 # Prevent occasions where minitest is not bundled in
 # packaged versions of ruby. See following issues/prs:
diff --git a/Gemfile.lock b/Gemfile.lock
index 55c77d04f..f3c97edae 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -650,7 +650,7 @@ GEM
     ruby-oembed (0.12.0)
     ruby-progressbar (1.10.1)
     ruby_dep (1.5.0)
-    rubyzip (1.2.2)
+    rubyzip (1.3.0)
     rugged (0.28.2)
     safe_yaml (1.0.5)
     sass (3.4.25)
@@ -904,7 +904,7 @@ DEPENDENCIES
   rubocop (= 0.72.0)
   rubocop-rails (= 2.1.0)
   ruby-oembed (= 0.12.0)
-  rubyzip (= 1.2.2)
+  rubyzip (= 1.3.0)
   sass-rails (= 5.0.7)
   secure_headers (= 6.3.0)
   shoulda-matchers (= 4.0.1)