diff --git a/src/oc-id/Gemfile b/src/oc-id/Gemfile
index e2dad5fa68..a839951e5e 100644
--- a/src/oc-id/Gemfile
+++ b/src/oc-id/Gemfile
@@ -13,7 +13,7 @@ gem 'rb-readline', '~> 0.5.2', require: false
 gem 'sass-rails', '>= 4.0.3'
 gem 'turbolinks', '~> 5'
 gem 'unicorn-rails', '~> 2.2', '>= 2.2.1'
-gem 'nokogiri', '1.15.6'
+gem 'nokogiri', '1.18.6'
 gem 'pg', '>= 0.18', '< 2.0' # active_record 4.2.8 pins this but doesn't manifest this in the gemspec for some reason
 gem 'mixlib-authentication', '>= 2.1', '< 4'
 gem 'responders', '~> 3.0', '>= 3.0.1'
diff --git a/src/oc-id/Gemfile.lock b/src/oc-id/Gemfile.lock
index 200d171709..a753bc6113 100644
--- a/src/oc-id/Gemfile.lock
+++ b/src/oc-id/Gemfile.lock
@@ -313,7 +313,7 @@ GEM
     matrix (0.4.2)
     method_source (1.0.0)
     mini_mime (1.1.5)
-    mini_portile2 (2.8.7)
+    mini_portile2 (2.8.8)
     minitest (5.24.1)
     mixlib-archive (1.1.7)
       mixlib-log
@@ -343,7 +343,7 @@ GEM
       net-protocol
     net-ssh (6.1.0)
     nio4r (2.5.9)
-    nokogiri (1.15.6)
+    nokogiri (1.18.6)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     nori (2.6.0)
@@ -614,7 +614,7 @@ DEPENDENCIES
   jwt
   mailcatcher
   mixlib-authentication (>= 2.1, < 4)
-  nokogiri (= 1.15.6)
+  nokogiri (= 1.18.6)
   omniauth-chef (~> 0.4)
   pg (>= 0.18, < 2.0)
   pry-byebug