diff --git a/Gemfile b/Gemfile
index d27f67bf71..7678e293ce 100644
--- a/Gemfile
+++ b/Gemfile
@@ -120,7 +120,7 @@ gem 'daemons'
 gem 'delayed_cron_job', '~> 0.9.0'
 gem 'delayed_job_active_record', '~> 4.1.5'
 
-gem 'rack-protection', '~> 2.2.0'
+gem 'rack-protection', '~> 3.0.0'
 
 # Rack::Attack is a rack middleware to protect your web app from bad clients.
 # It allows whitelisting, blacklisting, throttling, and tracking based
diff --git a/Gemfile.lock b/Gemfile.lock
index 7c7d4de98a..f2196e5190 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -752,7 +752,7 @@ GEM
       httpclient
       json-jwt (>= 1.11.0)
       rack (>= 2.1.0)
-    rack-protection (2.2.2)
+    rack-protection (3.0.2)
       rack
     rack-test (2.0.2)
       rack (>= 1.3)
@@ -1119,7 +1119,7 @@ DEPENDENCIES
   rack-attack (~> 6.6.0)
   rack-cors (~> 1.1.1)
   rack-mini-profiler
-  rack-protection (~> 2.2.0)
+  rack-protection (~> 3.0.0)
   rack-test (~> 2.0.0)
   rack-timeout (~> 0.6.3)
   rack_session_access