diff --git a/Gemfile b/Gemfile
index e3cd099625c..697e89dee00 100644
--- a/Gemfile
+++ b/Gemfile
@@ -15,7 +15,7 @@ gem "coffee-rails", "~> 4.2.2"
 gem "daemons", "~> 1.2.4"
 gem "dalli", "~> 2.7.6"
 gem "delayed_job_active_record", "~> 4.1.3"
-gem "devise", "~> 4.6.0"
+gem "devise", "~> 4.7.1"
 gem "devise-async", "~> 1.0.0"
 gem "devise_security_extension", git: "https://github.com/phatworx/devise_security_extension.git" #, "~> 0.10"
 gem "foundation-rails", "~> 6.4.3.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 32dec0fa812..8541d03d6ee 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -84,7 +84,7 @@ GEM
     babel-transpiler (0.7.0)
       babel-source (>= 4.0, < 6)
       execjs (~> 2.0)
-    bcrypt (3.1.13)
+    bcrypt (3.1.16)
     better_html (1.0.15)
       actionview (>= 4.0)
       activesupport (>= 4.0)
@@ -136,7 +136,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.12.2)
-    concurrent-ruby (1.1.6)
+    concurrent-ruby (1.1.8)
     coveralls (0.8.23)
       json (>= 1.8, < 3)
       simplecov (~> 0.16.1)
@@ -153,10 +153,10 @@ GEM
     delayed_job_active_record (4.1.4)
       activerecord (>= 3.0, < 6.1)
       delayed_job (>= 3.0, < 5)
-    devise (4.6.2)
+    devise (4.7.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0, < 6.0)
+      railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
     devise-async (1.0.0)
@@ -276,7 +276,7 @@ GEM
       actionmailer (>= 3.2)
       letter_opener (~> 1.0)
       railties (>= 3.2)
-    loofah (2.6.0)
+    loofah (2.9.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -289,10 +289,12 @@ GEM
     mime-types (3.3.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2020.0512)
-    mimemagic (0.3.5)
+    mimemagic (0.3.10)
+      nokogiri (~> 1)
+      rake
     mini_mime (1.0.2)
-    mini_portile2 (2.4.0)
-    minitest (5.14.1)
+    mini_portile2 (2.5.1)
+    minitest (5.14.4)
     mixlib-cli (1.7.0)
     mixlib-config (2.2.18)
       tomlrb
@@ -304,8 +306,9 @@ GEM
     net-ssh (6.1.0)
     newrelic_rpm (4.1.0.333)
     nio4r (2.5.2)
-    nokogiri (1.10.10)
-      mini_portile2 (~> 2.4.0)
+    nokogiri (1.11.4)
+      mini_portile2 (~> 2.5.0)
+      racc (~> 1.4)
     nori (2.6.0)
     oauth (0.5.4)
     oauth2 (1.4.4)
@@ -359,6 +362,7 @@ GEM
     powerpack (0.1.2)
     public_suffix (4.0.5)
     puma (3.12.6)
+    racc (1.5.2)
     rack (2.2.3)
     rack-accept (0.4.5)
       rack (>= 0.4)
@@ -502,7 +506,7 @@ GEM
       tins (~> 1.0)
     terminal-table (1.8.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
-    thor (1.0.1)
+    thor (1.1.0)
     thread_safe (0.3.6)
     tilt (2.0.10)
     tins (1.25.0)
@@ -515,7 +519,7 @@ GEM
       rack (>= 1.3, < 3)
       rack-accept (~> 0.4)
       tilt (>= 1.4, < 3)
-    tzinfo (1.2.7)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
@@ -526,8 +530,8 @@ GEM
     uniform_notifier (1.11.0)
     user_agent_parser (2.7.0)
     uuidtools (2.2.0)
-    warden (1.2.8)
-      rack (>= 2.0.6)
+    warden (1.2.9)
+      rack (>= 2.0.9)
     wasabi (3.5.0)
       httpi (~> 2.0)
       nokogiri (>= 1.4.2)
@@ -575,7 +579,7 @@ DEPENDENCIES
   dalli (~> 2.7.6)
   database_cleaner (~> 1.7.0)
   delayed_job_active_record (~> 4.1.3)
-  devise (~> 4.6.0)
+  devise (~> 4.7.1)
   devise-async (~> 1.0.0)
   devise_security_extension!
   email_spec (~> 2.1.0)