diff --git a/Gemfile.lock b/Gemfile.lock
index 4eed543a12..0db0fadf4f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -101,6 +101,7 @@ GEM
     coderay (1.1.1)
     concurrent-ruby (1.0.2)
     concurrent-ruby (1.0.2-java)
+    crass (1.0.6)
     crb (1.0.1)
     cucumber (1.3.20)
       builder (>= 2.1.2)
@@ -191,14 +192,17 @@ GEM
       activesupport (>= 4, < 5.1)
       railties (>= 4, < 5.1)
     logstash-event (1.2.02)
-    loofah (2.0.3)
+    loofah (2.18.0)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     machinist (1.0.6)
     mail (2.6.4)
       mime-types (>= 1.16, < 4)
     method_source (0.8.2)
     mime-types (2.99.3)
-    mimemagic (0.3.2)
+    mimemagic (0.3.10)
+      nokogiri (~> 1)
+      rake
     mini_portile2 (2.1.0)
     minitest (5.9.1)
     multi_json (1.12.1)
@@ -206,10 +210,9 @@ GEM
     mysql2 (0.4.4)
     net-ldap (0.15.0)
     netrc (0.11.0)
-    nokogiri (1.6.8)
+    nokogiri (1.6.8.1)
       mini_portile2 (~> 2.1.0)
-      pkg-config (~> 1.1.7)
-    nokogiri (1.6.8-java)
+    nokogiri (1.6.8.1-java)
     orm_adapter (0.5.0)
     paperclip (5.1.0)
       activemodel (>= 4.2.0)
@@ -218,7 +221,6 @@ GEM
       mime-types
       mimemagic (~> 0.3.0)
     pg (0.18.4)
-    pkg-config (1.1.7)
     poltergeist (1.10.0)
       capybara (~> 2.1)
       cliver (~> 0.3.1)
@@ -255,8 +257,8 @@ GEM
       activesupport (>= 4.2.0.beta, < 5.0)
       nokogiri (~> 1.6.0)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.0.3)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.4.3)
+      loofah (~> 2.3)
     rails-observers (0.1.2)
       activemodel (~> 4.0)
     rails-perftest (0.0.6)