diff --git a/Gemfile b/Gemfile
index c810229..c71dd86 100644
--- a/Gemfile
+++ b/Gemfile
@@ -67,7 +67,7 @@ gem 'jquery-ui-rails', '6.0.1'
 gem 'cancancan', '2.1.2'
 gem 'validates_timeliness', '4.0.2'
 gem 'time_date_helpers', '0.0.2'
-gem 'carrierwave', '1.2.2'
+gem 'carrierwave', '1.3.2'
 gem 'bootstrap-will_paginate'
 gem 'vuejs-rails', '2.5.13'
 gem 'best_in_place', '~> 3.0.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index bbce738..f32c6f3 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -67,10 +67,11 @@ GEM
       rack (>= 1.0.0)
       rack-test (>= 0.5.4)
       xpath (>= 2.0, < 4.0)
-    carrierwave (1.2.2)
+    carrierwave (1.3.2)
       activemodel (>= 4.0.0)
       activesupport (>= 4.0.0)
       mime-types (>= 1.16)
+      ssrf_filter (~> 1.0)
     childprocess (0.9.0)
       ffi (~> 1.0, >= 1.0.11)
     chronic (0.10.2)
@@ -82,7 +83,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.12.2)
-    concurrent-ruby (1.1.5)
+    concurrent-ruby (1.1.8)
     crass (1.0.6)
     cucumber (3.1.2)
       builder (>= 2.1.2)
@@ -124,7 +125,7 @@ GEM
     globalid (0.4.2)
       activesupport (>= 4.2.0)
     hirb (0.7.3)
-    i18n (1.8.2)
+    i18n (1.8.8)
       concurrent-ruby (~> 1.0)
     jbuilder (2.9.1)
       activesupport (>= 4.2.0)
@@ -151,12 +152,12 @@ GEM
       rack-contrib (>= 1.1, < 3)
       railties (>= 3.0.0, < 6)
     method_source (0.9.2)
-    mime-types (3.2.2)
+    mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2019.0331)
+    mime-types-data (3.2020.1104)
     mini_mime (1.0.2)
     mini_portile2 (2.4.0)
-    minitest (5.14.0)
+    minitest (5.14.3)
     minitest-rails (3.0.0)
       minitest (~> 5.8)
       railties (~> 5.0)
@@ -255,6 +256,7 @@ GEM
       actionpack (>= 4.0)
       activesupport (>= 4.0)
       sprockets (>= 3.0.0)
+    ssrf_filter (1.0.7)
     thor (0.20.3)
     thread_safe (0.3.6)
     tilt (2.0.9)
@@ -266,7 +268,7 @@ GEM
     turbolinks (5.2.0)
       turbolinks-source (~> 5.2)
     turbolinks-source (5.2.0)
-    tzinfo (1.2.6)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.1.20)
       execjs (>= 0.3.0, < 3)
@@ -297,7 +299,7 @@ DEPENDENCIES
   byebug
   cancancan (= 2.1.2)
   capybara (= 2.17.0)
-  carrierwave (= 1.2.2)
+  carrierwave (= 1.3.2)
   chronic (= 0.10.2)
   coffee-rails (~> 4.2)
   cucumber (= 3.1.2)