diff --git a/Gemfile b/Gemfile
index 6ba01e43c..5d77b5743 100644
--- a/Gemfile
+++ b/Gemfile
@@ -141,7 +141,7 @@ group :development do
   gem 'memory_profiler'
   gem 'rubocop', '~> 0.86', require: false
   gem 'rubocop-rails', '~> 2.6', require: false
-  gem 'brakeman', '~> 4.8', require: false
+  gem 'brakeman', '~> 4.9', require: false
   gem 'bundler-audit', '~> 0.7', require: false
 
   gem 'capistrano', '~> 3.14'
diff --git a/Gemfile.lock b/Gemfile.lock
index 488cf5958..e72d2b520 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -103,7 +103,7 @@ GEM
       ffi (~> 1.10.0)
     bootsnap (1.4.7)
       msgpack (~> 1.0)
-    brakeman (4.8.2)
+    brakeman (4.9.0)
     browser (4.2.0)
     builder (3.2.4)
     bullet (6.1.0)
@@ -660,7 +660,7 @@ DEPENDENCIES
   binding_of_caller (~> 0.7)
   blurhash (~> 0.1)
   bootsnap (~> 1.4)
-  brakeman (~> 4.8)
+  brakeman (~> 4.9)
   browser
   bullet (~> 6.1)
   bundler-audit (~> 0.7)