diff --git a/Gemfile b/Gemfile
index 45dc4dfebed53..c7974b383af5c 100644
--- a/Gemfile
+++ b/Gemfile
@@ -179,7 +179,7 @@ gem 'diffy', '~> 3.3'
 gem 'diff_match_patch', '~> 0.1.0'
 
 # Application server
-gem 'rack', '~> 2.2.3'
+gem 'rack', '~> 2.2.6'
 # https://github.com/sharpstone/rack-timeout/blob/master/README.md#rails-apps-manually
 gem 'rack-timeout', '~> 0.5.1', require: 'rack/timeout/base'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index fc13e8d6ecccb..951f21544d341 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -946,7 +946,7 @@ GEM
     pyu-ruby-sasl (0.0.3.3)
     raabro (1.1.6)
     racc (1.5.2)
-    rack (2.2.3)
+    rack (2.2.6.2)
     rack-accept (0.4.5)
       rack (>= 0.4)
     rack-attack (6.3.0)
@@ -1567,7 +1567,7 @@ DEPENDENCIES
   pry-shell (~> 0.5.0)
   puma (~> 5.3.1)
   puma_worker_killer (~> 0.3.1)
-  rack (~> 2.2.3)
+  rack (~> 2.2.6)
   rack-attack (~> 6.3.0)
   rack-cors (~> 1.0.6)
   rack-oauth2 (~> 1.16.0)