diff --git a/Gemfile b/Gemfile
index 2a53b6ddbd77c7a42fba8468d8f1603ba813c455..19903cd71459e3b1cb08575ef2fdf9019a9bcc6d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -202,7 +202,7 @@ gem "logging-rails", "0.6.0", require: "logging/rails"
 
 # Reading and writing zip files
 
-gem "rubyzip", "1.3.0", require: "zip"
+gem "rubyzip", "2.3.0", require: "zip"
 
 # Prevent occasions where minitest is not bundled in
 # packaged versions of ruby. See following issues/prs:
diff --git a/Gemfile.lock b/Gemfile.lock
index f96686cb59997c02be7eb51e0ea751ac192ce543..92ab90a5838b984f3c0ed9a6c1a0394aa23c42f3 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -656,7 +656,7 @@ GEM
       rubocop (>= 0.72.0)
     ruby-oembed (0.12.0)
     ruby-progressbar (1.10.1)
-    rubyzip (1.3.0)
+    rubyzip (2.3.0)
     rugged (0.99.0)
     safe_yaml (1.0.5)
     sass (3.4.25)
@@ -902,7 +902,7 @@ DEPENDENCIES
   rubocop (= 0.80.1)
   rubocop-rails (= 2.4.1)
   ruby-oembed (= 0.12.0)
-  rubyzip (= 1.3.0)
+  rubyzip (= 2.3.0)
   sass-rails (= 5.0.7)
   secure_headers (= 6.3.0)
   shoulda-matchers (= 4.0.1)