diff --git a/Gemfile b/Gemfile
index d3ca509fb19e4ee5aabef6a5de0d3a4d0d6074d0..4e083a4ba81ec05b44743546c4680a27b286c67b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -143,7 +143,7 @@ gem "leaflet-rails",       "1.7.0"
 
 # Parsing
 
-gem "nokogiri",          "1.11.7"
+gem "nokogiri",          "1.12.5"
 gem "open_graph_reader", "0.7.2" # also update User-Agent in features/support/webmock.rb and open_graph_cache_spec.rb
 gem "redcarpet",         "3.5.1"
 gem "ruby-oembed",       "0.15.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 413c70ca8b36c5df39c71ea1c0fea66a5a3924a2..b120ae83854abf7f6f040520942c302530809c28 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -410,7 +410,7 @@ GEM
     mime-types-data (3.2021.0901)
     mini_magick (4.11.0)
     mini_mime (1.1.2)
-    mini_portile2 (2.5.3)
+    mini_portile2 (2.6.1)
     minitest (5.14.4)
     mobile-fu (1.4.0)
       rack-mobile-detect
@@ -422,8 +422,8 @@ GEM
     mysql2 (0.5.3)
     naught (1.1.0)
     nio4r (2.5.7)
-    nokogiri (1.11.7)
-      mini_portile2 (~> 2.5.0)
+    nokogiri (1.12.5)
+      mini_portile2 (~> 2.6.1)
       racc (~> 1.4)
     oauth (0.5.6)
     oauth2 (1.4.7)
@@ -851,7 +851,7 @@ DEPENDENCIES
   minitest
   mobile-fu (= 1.4.0)
   mysql2 (= 0.5.3)
-  nokogiri (= 1.11.7)
+  nokogiri (= 1.12.5)
   omniauth (= 1.9.1)
   omniauth-tumblr (= 1.2)
   omniauth-twitter (= 1.4.0)