diff --git a/Gemfile b/Gemfile
index 9e8201be01d..a9608fc2559 100644
--- a/Gemfile
+++ b/Gemfile
@@ -121,7 +121,7 @@ gem "csv", "~> 3.3"
 # provide compatible filesystem information for available storage
 gem "sys-filesystem", "~> 1.5.0", require: false
 
-gem "bcrypt", "~> 3.1.6"
+gem "bcrypt", "~> 3.1.22"
 
 gem "multi_json", "~> 1.19.0"
 gem "oj", "~> 3.16.16"
diff --git a/Gemfile.lock b/Gemfile.lock
index 32f75f4ffac..c70ec214dff 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -382,7 +382,7 @@ GEM
       ice_nine (~> 0.11.0)
       thread_safe (~> 0.3, >= 0.3.1)
     base64 (0.3.0)
-    bcrypt (3.1.21)
+    bcrypt (3.1.22)
     benchmark (0.5.0)
     better_html (2.2.0)
       actionview (>= 7.0)
@@ -1583,7 +1583,7 @@ DEPENDENCIES
   aws-sdk-core (~> 3.241)
   aws-sdk-s3 (~> 1.213)
   axe-core-rspec
-  bcrypt (~> 3.1.6)
+  bcrypt (~> 3.1.22)
   bootsnap (~> 1.23.0)
   brakeman (~> 8.0.1)
   browser (~> 6.2.0)
@@ -1836,7 +1836,7 @@ CHECKSUMS
   axe-core-rspec (4.11.1) sha256=dc6c0e166405cd3a28c4a0937f6521ee5b511c12c0ca1627144a1ee7d5014aec
   axiom-types (0.1.1) sha256=c1ff113f3de516fa195b2db7e0a9a95fd1b08475a502ff660d04507a09980383
   base64 (0.3.0) sha256=27337aeabad6ffae05c265c450490628ef3ebd4b67be58257393227588f5a97b
-  bcrypt (3.1.21) sha256=5964613d750a42c7ee5dc61f7b9336fb6caca429ba4ac9f2011609946e4a2dcf
+  bcrypt (3.1.22) sha256=1f0072e88c2d705d94aff7f2c5cb02eb3f1ec4b8368671e19112527489f29032
   benchmark (0.5.0) sha256=465df122341aedcb81a2a24b4d3bd19b6c67c1530713fd533f3ff034e419236c
   better_html (2.2.0) sha256=e68ab66ab09696b708333bbf35e8aa3c107500ba7892f528e2111624bdd8cf76
   bigdecimal (3.3.1) sha256=eaa01e228be54c4f9f53bf3cc34fe3d5e845c31963e7fcc5bedb05a4e7d52218