diff --git a/Gemfile b/Gemfile
index 6699a803f05..cfd7bb67023 100644
--- a/Gemfile
+++ b/Gemfile
@@ -48,7 +48,7 @@ gem "searchkick", "~> 5.5"
 gem "faraday_middleware-aws-sigv4", "~> 1.0"
 gem "xml-simple", "~> 1.1"
 gem "compact_index", "~> 0.15.0"
-gem "rack-attack", "~> 6.6"
+gem "rack-attack", "~> 6.8"
 gem "rqrcode", "~> 3.1"
 gem "rotp", "~> 6.2"
 gem "unpwn", "~> 1.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 1553e93a31e..29a93cf8317 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -630,7 +630,7 @@ GEM
     raabro (1.4.0)
     racc (1.8.1)
     rack (3.2.3)
-    rack-attack (6.7.0)
+    rack-attack (6.8.0)
       rack (>= 1.0, < 4)
     rack-oauth2 (2.2.1)
       activesupport
@@ -998,7 +998,7 @@ DEPENDENCIES
   puma-plugin-statsd (~> 2.6)
   pundit (~> 2.5)
   rack (~> 3.2)
-  rack-attack (~> 6.6)
+  rack-attack (~> 6.8)
   rack-sanitizer (~> 2.0)
   rack-test (~> 2.2)
   rackup (~> 2.2)
@@ -1279,7 +1279,7 @@ CHECKSUMS
   raabro (1.4.0) sha256=d4fa9ff5172391edb92b242eed8be802d1934b1464061ae5e70d80962c5da882
   racc (1.8.1) sha256=4a7f6929691dbec8b5209a0b373bc2614882b55fc5d2e447a21aaa691303d62f
   rack (3.2.3) sha256=239a373da6584574f25f042d8ed4ba21e691c9799f1d2b5c8920bbbc23ca3d41
-  rack-attack (6.7.0) sha256=3ca47e8f66cd33b2c96af53ea4754525cd928ed3fa8da10ee6dad0277791d77c
+  rack-attack (6.8.0) sha256=f2499fdebf85bcc05573a22dff57d24305ac14ec2e4156cd3c28d47cafeeecf2
   rack-oauth2 (2.2.1) sha256=c73aa87c508043e2258f02b4fb110cacba9b37d2ccf884e22487d014a120d1a5
   rack-protection (4.1.1) sha256=51a254a5d574a7f0ca4f0672025ce2a5ef7c8c3bd09c431349d683e825d7d16a
   rack-sanitizer (2.0.4) sha256=782ff5efb53177f6d2ab3a80ce07dbfecef8123a1e5c613160a38731e49e846c