diff --git a/api/Gemfile.lock b/api/Gemfile.lock
index 982e74c7..7301c5c3 100644
--- a/api/Gemfile.lock
+++ b/api/Gemfile.lock
@@ -48,6 +48,7 @@ GEM
     byebug (9.0.6)
     coderay (1.1.1)
     concurrent-ruby (1.0.5)
+    crass (1.0.6)
     database_cleaner (1.5.3)
     delayed_job (4.1.8)
       activesupport (>= 3.0, < 6.1)
@@ -83,7 +84,8 @@ GEM
     hashie (3.5.5)
     i18n (0.8.6)
     json (2.0.4)
-    loofah (2.0.3)
+    loofah (2.19.1)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.6.4)
       mime-types (>= 1.16, < 4)
@@ -105,7 +107,7 @@ GEM
       railties (>= 3.0)
     multipart-post (2.0.0)
     nio4r (2.5.2)
-    nokogiri (1.10.9)
+    nokogiri (1.10.10)
       mini_portile2 (~> 2.4.0)
     omniauth (1.6.1)
       hashie (>= 3.4.6, < 3.6.0)