diff --git a/Gemfile b/Gemfile
index 44b9ffc882b..c0f55102283 100644
--- a/Gemfile
+++ b/Gemfile
@@ -15,7 +15,7 @@ gem "coffee-rails", "~> 4.2.2"
 gem "daemons", "~> 1.2.4"
 gem "dalli", "~> 2.7.6"
 gem "delayed_job_active_record", "~> 4.1.3"
-gem "devise", "~> 4.6.0"
+gem "devise", "~> 4.7.1"
 gem "devise-async", "~> 1.0.0"
 gem "devise_security_extension", git: "https://github.com/phatworx/devise_security_extension.git" #, "~> 0.10"
 gem "foundation-rails", "~> 6.4.3.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 96541a0ee2e..40d40eff187 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -80,7 +80,7 @@ GEM
     babel-transpiler (0.7.0)
       babel-source (>= 4.0, < 6)
       execjs (~> 2.0)
-    bcrypt (3.1.12)
+    bcrypt (3.1.13)
     better_html (1.0.13)
       actionview (>= 4.0)
       activesupport (>= 4.0)
@@ -151,10 +151,10 @@ GEM
     delayed_job_active_record (4.1.3)
       activerecord (>= 3.0, < 5.3)
       delayed_job (>= 3.0, < 5)
-    devise (4.6.2)
+    devise (4.7.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0, < 6.0)
+      railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
     devise-async (1.0.0)
@@ -299,7 +299,7 @@ GEM
     net-ssh (5.0.2)
     newrelic_rpm (4.1.0.333)
     nio4r (2.3.1)
-    nokogiri (1.10.3)
+    nokogiri (1.10.4)
       mini_portile2 (~> 2.4.0)
     nori (2.6.0)
     oauth (0.5.4)
@@ -348,7 +348,7 @@ GEM
     powerpack (0.1.2)
     public_suffix (3.0.3)
     puma (3.12.1)
-    rack (2.0.6)
+    rack (2.0.7)
     rack-accept (0.4.5)
       rack (>= 0.4)
     rack-attack (5.0.1)
@@ -372,7 +372,7 @@ GEM
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.0.4)
+    rails-html-sanitizer (1.2.0)
       loofah (~> 2.2, >= 2.2.2)
     railties (5.0.7.2)
       actionpack (= 5.0.7.2)
@@ -382,7 +382,7 @@ GEM
       thor (>= 0.18.1, < 2.0)
     rainbow (3.0.0)
     raindrops (0.19.0)
-    rake (12.3.2)
+    rake (12.3.3)
     recaptcha (4.14.0)
       json
     recipient_interceptor (0.2.0)
@@ -553,7 +553,7 @@ DEPENDENCIES
   dalli (~> 2.7.6)
   database_cleaner (~> 1.7.0)
   delayed_job_active_record (~> 4.1.3)
-  devise (~> 4.6.0)
+  devise (~> 4.7.1)
   devise-async (~> 1.0.0)
   devise_security_extension!
   email_spec (~> 2.1.0)