diff --git a/Gemfile b/Gemfile
index b747855..85301c7 100644
--- a/Gemfile
+++ b/Gemfile
@@ -38,7 +38,7 @@ gem 'prawn'
 gem 'prawn-table'
 gem 'newrelic_rpm'
 gem 'sendgrid-ruby'
-gem 'carrierwave', '~> 1.0'
+gem 'carrierwave', '~> 1.3'
 gem 'mini_magick'
 
 gem 'rails_12factor', group: :production
diff --git a/Gemfile.lock b/Gemfile.lock
index 8fc0de8..ec19eb8 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -45,10 +45,11 @@ GEM
     bindex (0.5.0)
     builder (3.2.3)
     byebug (9.1.0)
-    carrierwave (1.2.2)
+    carrierwave (1.3.2)
       activemodel (>= 4.0.0)
       activesupport (>= 4.0.0)
       mime-types (>= 1.16)
+      ssrf_filter (~> 1.0)
     chartkick (2.2.5)
     codeclimate-test-reporter (1.0.8)
       simplecov (<= 0.13)
@@ -60,7 +61,7 @@ GEM
       execjs
     coffee-script-source (1.12.2)
     commonjs (0.2.7)
-    concurrent-ruby (1.0.5)
+    concurrent-ruby (1.1.8)
     crass (1.0.3)
     database_cleaner (1.6.2)
     devise (4.4.0)
@@ -80,7 +81,7 @@ GEM
     ffi (1.9.18-x86-mingw32)
     globalid (0.4.1)
       activesupport (>= 4.2.0)
-    i18n (0.9.1)
+    i18n (0.9.5)
       concurrent-ruby (~> 1.0)
     jbuilder (2.7.0)
       activesupport (>= 4.2.0)
@@ -107,13 +108,13 @@ GEM
     mail (2.7.0)
       mini_mime (>= 0.1.1)
     method_source (0.9.0)
-    mime-types (3.1)
+    mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2016.0521)
+    mime-types-data (3.2020.1104)
     mini_magick (4.8.0)
     mini_mime (1.0.0)
     mini_portile2 (2.3.0)
-    minitest (5.11.1)
+    minitest (5.14.3)
     multi_json (1.13.1)
     mustermann (1.0.1)
     newrelic_rpm (4.7.1.340)
@@ -233,6 +234,7 @@ GEM
     sqlite3 (1.3.13)
     sqlite3 (1.3.13-x64-mingw32)
     sqlite3 (1.3.13-x86-mingw32)
+    ssrf_filter (1.0.7)
     thor (0.20.0)
     thread_safe (0.3.6)
     tilt (2.0.8)
@@ -245,7 +247,7 @@ GEM
       execjs (~> 2.7)
       less-rails (~> 2.8, >= 2.8.0)
       railties (~> 5.0, >= 5.0.1)
-    tzinfo (1.2.4)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     tzinfo-data (1.2017.3)
       tzinfo (>= 1.0.0)
@@ -269,7 +271,7 @@ PLATFORMS
 
 DEPENDENCIES
   byebug
-  carrierwave (~> 1.0)
+  carrierwave (~> 1.3)
   chartkick
   codeclimate-test-reporter (~> 1.0.0)
   coffee-rails (~> 4.2)