diff --git a/Gemfile b/Gemfile
index 7158da4..b013427 100644
--- a/Gemfile
+++ b/Gemfile
@@ -18,7 +18,7 @@ gem 'simple_form'
 gem 'uglifier'
 gem 'webpacker'
 gem 'cloudinary'
-gem 'carrierwave', '~> 1.2'
+gem 'carrierwave', '~> 1.3'
 gem 'money-rails'
 gem 'stripe'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 1b4acb6..1bae821 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -55,15 +55,16 @@ GEM
       sass (>= 3.3.4)
     builder (3.2.3)
     byebug (10.0.2)
-    carrierwave (1.2.3)
+    carrierwave (1.3.2)
       activemodel (>= 4.0.0)
       activesupport (>= 4.0.0)
       mime-types (>= 1.16)
+      ssrf_filter (~> 1.0)
     cloudinary (1.9.1)
       aws_cf_signer
       rest-client
     coderay (1.1.2)
-    concurrent-ruby (1.0.5)
+    concurrent-ruby (1.1.8)
     crass (1.0.4)
     devise (4.5.0)
       bcrypt (~> 3.0)
@@ -104,13 +105,13 @@ GEM
     marcel (0.3.2)
       mimemagic (~> 0.3.2)
     method_source (0.9.0)
-    mime-types (3.2.2)
+    mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2018.0812)
+    mime-types-data (3.2020.1104)
     mimemagic (0.3.2)
     mini_mime (1.0.1)
     mini_portile2 (2.3.0)
-    minitest (5.11.3)
+    minitest (5.14.3)
     monetize (1.7.0)
       money (~> 6.9)
     money (6.11.3)
@@ -208,12 +209,13 @@ GEM
       actionpack (>= 4.0)
       activesupport (>= 4.0)
       sprockets (>= 3.0.0)
+    ssrf_filter (1.0.7)
     stripe (3.23.0)
       faraday (~> 0.10)
     thor (0.20.0)
     thread_safe (0.3.6)
     tilt (2.0.8)
-    tzinfo (1.2.5)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.1.18)
       execjs (>= 0.3.0, < 3)
@@ -242,7 +244,7 @@ DEPENDENCIES
   autoprefixer-rails
   bootsnap
   bootstrap-sass (~> 3.3)
-  carrierwave (~> 1.2)
+  carrierwave (~> 1.3)
   cloudinary
   devise
   dotenv-rails