diff --git a/rails/Gemfile b/rails/Gemfile
index faa8c0f7c..d5f33ec7c 100644
--- a/rails/Gemfile
+++ b/rails/Gemfile
@@ -38,7 +38,7 @@ gem 'jquery-fileupload-rails'
 gem 'mimemagic', '0.3.10'
 gem 'mysql2', platforms: [:ruby, :mingw]
 
-gem 'nokogiri'
+gem 'nokogiri', '~> 1.8', '>= 1.8.2'
 gem 'oj'
 gem 'omniauth'
 gem 'omniauth-google-oauth2' # For google login integration.
diff --git a/rails/Gemfile.lock b/rails/Gemfile.lock
index 7145f1599..91d149192 100644
--- a/rails/Gemfile.lock
+++ b/rails/Gemfile.lock
@@ -308,7 +308,7 @@ GEM
       nokogiri (~> 1)
       rake
     mini_mime (1.1.0)
-    mini_portile2 (2.5.3)
+    mini_portile2 (2.8.4)
     minitest (5.14.4)
     msgpack (1.4.2)
     multi_json (1.15.0)
@@ -322,10 +322,10 @@ GEM
     net-http-persistent (4.0.1)
       connection_pool (~> 2.2)
     nio4r (2.5.7)
-    nokogiri (1.11.7)
-      mini_portile2 (~> 2.5.0)
+    nokogiri (1.15.4)
+      mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    nokogiri (1.11.7-x86-mingw32)
+    nokogiri (1.15.4-x86-mingw32)
       racc (~> 1.4)
     nokogumbo (2.0.5)
       nokogiri (~> 1.8, >= 1.8.4)
@@ -372,7 +372,7 @@ GEM
       nio4r (~> 2.0)
     pundit (1.1.0)
       activesupport (>= 3.0.0)
-    racc (1.5.2)
+    racc (1.7.1)
     rack (2.2.3)
     rack-cors (0.2.9)
     rack-test (1.1.0)
@@ -606,7 +606,7 @@ DEPENDENCIES
   launchy
   mimemagic (= 0.3.10)
   mysql2
-  nokogiri
+  nokogiri (~> 1.8, >= 1.8.2)
   oj
   omniauth
   omniauth-google-oauth2