diff --git a/src/oc-id/Gemfile b/src/oc-id/Gemfile
index 4935aa5719..4ea282ede3 100644
--- a/src/oc-id/Gemfile
+++ b/src/oc-id/Gemfile
@@ -13,7 +13,7 @@ gem 'rb-readline', '~> 0.5.2', require: false
 gem 'sass-rails', '>= 4.0.3'
 gem 'turbolinks', '~> 5'
 gem 'unicorn-rails', '~> 2.2', '>= 2.2.1'
-gem 'nokogiri', '1.11.7'
+gem 'nokogiri', '1.14.1'
 gem 'pg', '>= 0.18', '< 2.0' # active_record 4.2.8 pins this but doesn't manifest this in the gemspec for some reason
 gem 'mixlib-authentication', '>= 2.1', '< 4'
 gem 'sentry-raven'
diff --git a/src/oc-id/Gemfile.lock b/src/oc-id/Gemfile.lock
index 825c81c04a..6780eca2f2 100644
--- a/src/oc-id/Gemfile.lock
+++ b/src/oc-id/Gemfile.lock
@@ -319,7 +319,7 @@ GEM
     marcel (1.0.1)
     method_source (1.0.0)
     mini_mime (1.1.0)
-    mini_portile2 (2.5.3)
+    mini_portile2 (2.8.1)
     minitest (5.14.4)
     mixlib-archive (1.1.7)
       mixlib-log
@@ -341,8 +341,8 @@ GEM
     net-ssh (6.1.0)
     newrelic_rpm (7.2.0)
     nio4r (2.5.7)
-    nokogiri (1.11.7)
-      mini_portile2 (~> 2.5.0)
+    nokogiri (1.14.1)
+      mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
     nori (2.6.0)
     ohai (17.3.1)
@@ -380,7 +380,7 @@ GEM
       byebug (~> 11.0)
       pry (~> 0.13.0)
     public_suffix (4.0.6)
-    racc (1.5.2)
+    racc (1.6.2)
     rack (2.2.3)
     rack-protection (2.1.0)
       rack
@@ -603,7 +603,7 @@ DEPENDENCIES
   mailcatcher
   mixlib-authentication (>= 2.1, < 4)
   newrelic_rpm
-  nokogiri (= 1.11.7)
+  nokogiri (= 1.14.1)
   omniauth-chef (~> 0.4)
   pg (>= 0.18, < 2.0)
   pry-byebug