diff --git a/Gemfile b/Gemfile
index 77cc75a..3230332 100644
--- a/Gemfile
+++ b/Gemfile
@@ -23,7 +23,7 @@ gem 'bootstrap3-datetimepicker-rails', '~> 4.14.30'
 gem 'less-rails'
 gem 'less-rails-bootstrap'
 gem 'therubyracer', '~> 0.12.1'        # https://github.com/cowboyd/therubyracer
-gem 'carrierwave', '~> 1.0'
+gem 'carrierwave', '~> 1.3'
 gem 'fog-aws', '~> 1.3.0'
 gem 'mini_magick', '~> 4.8.0'
 gem 'sprockets', '3.6.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index 2750eb1..9224753 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -60,10 +60,11 @@ GEM
     capybara-webkit (1.15.1)
       capybara (>= 2.3, < 4.0)
       json
-    carrierwave (1.3.1)
+    carrierwave (1.3.2)
       activemodel (>= 4.0.0)
       activesupport (>= 4.0.0)
       mime-types (>= 1.16)
+      ssrf_filter (~> 1.0)
     coderay (1.1.2)
     coffee-rails (4.2.2)
       coffee-script (>= 2.2.0)
@@ -74,7 +75,7 @@ GEM
     coffee-script-source (1.12.2)
     columnize (0.9.0)
     commonjs (0.2.7)
-    concurrent-ruby (1.1.6)
+    concurrent-ruby (1.1.8)
     crass (1.0.6)
     database_cleaner (1.3.0)
     debugger-linecache (1.2.0)
@@ -155,11 +156,11 @@ GEM
     method_source (0.8.2)
     mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2020.0425)
+    mime-types-data (3.2020.1104)
     mini_magick (4.8.0)
     mini_mime (1.0.2)
     mini_portile2 (2.4.0)
-    minitest (5.14.0)
+    minitest (5.14.3)
     momentjs-rails (2.20.1)
       railties (>= 3.1)
     multi_json (1.14.1)
@@ -252,6 +253,7 @@ GEM
       actionpack (>= 4.0)
       activesupport (>= 4.0)
       sprockets (>= 3.0.0)
+    ssrf_filter (1.0.7)
     therubyracer (0.12.3)
       libv8 (~> 3.16.14.15)
       ref
@@ -265,7 +267,7 @@ GEM
       execjs (>= 2.2.2, >= 2.2)
       less-rails (>= 2.5.0)
       railties (>= 3.1)
-    tzinfo (1.2.7)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
@@ -292,7 +294,7 @@ DEPENDENCIES
   bootstrap3-datetimepicker-rails (~> 4.14.30)
   capybara (~> 2.5)
   capybara-webkit (~> 1.5)
-  carrierwave (~> 1.0)
+  carrierwave (~> 1.3)
   coffee-rails (>= 4.1.1, < 5)
   database_cleaner (~> 1.3.0)
   devise (>= 4, < 4.1.0)