diff --git a/Gemfile.lock b/Gemfile.lock
index 1f0fd61b456d0..c9548c9cf5958 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -193,7 +193,7 @@ GEM
     cookiejar (0.3.3)
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
-    crass (1.0.5)
+    crass (1.0.6)
     curses (1.0.2)
     daemons (1.3.1)
     dalli (2.7.10)
@@ -219,6 +219,9 @@ GEM
       tzinfo
     event_emitter (0.2.6)
     eventmachine (1.2.7)
+    eventmachine (1.2.7-java)
+    eventmachine (1.2.7-x64-mingw32)
+    eventmachine (1.2.7-x86-mingw32)
     execjs (2.7.0)
     faraday (1.0.0)
       multipart-post (>= 1.2, < 3)
@@ -276,6 +279,7 @@ GEM
     hiredis (0.6.3)
     hiredis (0.6.3-java)
     http_parser.rb (0.6.0)
+    http_parser.rb (0.6.0-java)
     httpclient (2.8.3)
     i18n (1.7.0)
       concurrent-ruby (~> 1.0)
@@ -298,7 +302,7 @@ GEM
     listen (3.2.1)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.4.0)
+    loofah (2.19.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -340,19 +344,12 @@ GEM
     nio4r (2.5.2-java)
     nokogiri (1.10.7)
       mini_portile2 (~> 2.4.0)
-    nokogiri (1.10.7-java)
-    nokogiri (1.10.7-x64-mingw32)
-      mini_portile2 (~> 2.4.0)
-    nokogiri (1.10.7-x86-mingw32)
-      mini_portile2 (~> 2.4.0)
     os (1.0.1)
     parallel (1.19.1)
     parser (2.7.1.1)
       ast (~> 2.4.0)
     path_expander (1.1.0)
     pg (1.2.3)
-    pg (1.2.3-x64-mingw32)
-    pg (1.2.3-x86-mingw32)
     psych (3.1.0)
     public_suffix (4.0.2)
     puma (4.3.1)
@@ -377,8 +374,8 @@ GEM
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.3.0)
-      loofah (~> 2.3)
+    rails-html-sanitizer (1.4.4)
+      loofah (~> 2.19, >= 2.19.1)
     rainbow (3.0.0)
     rake (13.0.1)
     rb-fsevent (0.10.3)