diff --git a/Gemfile b/Gemfile
index 9c207f8..c233b5c 100644
--- a/Gemfile
+++ b/Gemfile
@@ -9,7 +9,7 @@ gem 'rails', '~> 5.2.1'
 
 gem 'bcrypt'
 gem 'jwt'
-gem 'carrierwave', '~> 1.0'
+gem 'carrierwave', '~> 1.3'
 gem 'grape'
 gem 'grape-entity'
 gem 'grape-swagger'
diff --git a/Gemfile.lock b/Gemfile.lock
index 1824d29..5b08c27 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -75,17 +75,18 @@ GEM
       rack-test (>= 0.6.3)
       regexp_parser (~> 1.5)
       xpath (~> 3.2)
-    carrierwave (1.3.1)
+    carrierwave (1.3.2)
       activemodel (>= 4.0.0)
       activesupport (>= 4.0.0)
       mime-types (>= 1.16)
+      ssrf_filter (~> 1.0)
     childprocess (3.0.0)
     chromedriver-helper (2.1.1)
       archive-zip (~> 0.10)
       nokogiri (~> 1.8)
     coercible (1.0.0)
       descendants_tracker (~> 0.0.1)
-    concurrent-ruby (1.1.5)
+    concurrent-ruby (1.1.8)
     crass (1.0.5)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
@@ -123,7 +124,7 @@ GEM
       grape-swagger (>= 0.31.0)
     grape-swagger-rails (0.3.1)
       railties (>= 3.2.12)
-    i18n (1.7.0)
+    i18n (1.7.1)
       concurrent-ruby (~> 1.0)
     ice_nine (0.11.2)
     io-like (0.3.0)
@@ -142,13 +143,13 @@ GEM
     marcel (0.3.3)
       mimemagic (~> 0.3.2)
     method_source (0.9.2)
-    mime-types (3.3)
+    mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2019.1009)
+    mime-types-data (3.2020.1104)
     mimemagic (0.3.3)
     mini_mime (1.0.2)
     mini_portile2 (2.4.0)
-    minitest (5.13.0)
+    minitest (5.14.3)
     msgpack (1.3.1)
     multi_json (1.14.1)
     mustermann (1.0.3)
@@ -237,6 +238,7 @@ GEM
       actionpack (>= 4.0)
       activesupport (>= 4.0)
       sprockets (>= 3.0.0)
+    ssrf_filter (1.0.7)
     tablesalt (0.19.2)
       activemodel (>= 5.2.1)
       activesupport (>= 5.2.1)
@@ -249,7 +251,7 @@ GEM
     turbolinks (5.2.1)
       turbolinks-source (~> 5.2)
     turbolinks-source (5.2.0)
-    tzinfo (1.2.5)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
@@ -277,7 +279,7 @@ DEPENDENCIES
   bootsnap (>= 1.1.0)
   byebug
   capybara (>= 2.15)
-  carrierwave (~> 1.0)
+  carrierwave (~> 1.3)
   chromedriver-helper
   factory_bot_rails
   faker!