diff --git a/Gemfile b/Gemfile
index e13e648..7e8112d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -33,7 +33,7 @@ gem 'mail', '2.7.1'
 gem 'naturalsort'
 gem 'net-ldap', '0.16.2'
 gem 'nokogiri', '1.10.9'
-gem 'omniauth', '1.9.0'
+gem 'omniauth', '1.9.1'
 gem 'omniauth-shibboleth', '1.3.0'
 gem 'pg', '0.21.0'
 gem 'rails', '4.2.11.1' # locked
diff --git a/Gemfile.lock b/Gemfile.lock
index 4bbbeec..418583d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -110,7 +110,7 @@ GEM
       rake
     globalid (0.4.2)
       activesupport (>= 4.2.0)
-    hashie (3.6.0)
+    hashie (4.1.0)
     honeycomb-beeline (1.3.0)
       libhoney (~> 1.8)
     http (4.2.0)
@@ -173,8 +173,8 @@ GEM
     net-ssh (5.2.0)
     nokogiri (1.10.9)
       mini_portile2 (~> 2.4.0)
-    omniauth (1.9.0)
-      hashie (>= 3.4.6, < 3.7.0)
+    omniauth (1.9.1)
+      hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
     omniauth-shibboleth (1.3.0)
       omniauth (>= 1.0.0)
@@ -187,7 +187,7 @@ GEM
       coderay (~> 1.1.0)
       method_source (~> 0.9.0)
     public_suffix (4.0.1)
-    rack (1.6.12)
+    rack (1.6.13)
     rack-test (0.6.3)
       rack (>= 1.0)
     rails (4.2.11.1)
@@ -346,7 +346,7 @@ DEPENDENCIES
   naturalsort
   net-ldap (= 0.16.2)
   nokogiri (= 1.10.9)
-  omniauth (= 1.9.0)
+  omniauth (= 1.9.1)
   omniauth-shibboleth (= 1.3.0)
   pg (= 0.21.0)
   pry (= 0.12.2)