diff --git a/Gemfile b/Gemfile
index 00051859..c0c1dd39 100644
--- a/Gemfile
+++ b/Gemfile
@@ -11,7 +11,7 @@ group :production, :development, :test do
   # Use sqlite3 as the database for Active Record
   gem 'sqlite3', '~> 1.3.13'
   # Use Puma as the app server
-  gem 'puma', '~> 3.7'
+  gem 'puma', '~> 3.12'
   # Use SCSS for stylesheets
   gem 'sass-rails', '~> 5.0'
   # Use Uglifier as compressor for JavaScript assets
diff --git a/Gemfile.lock b/Gemfile.lock
index b312a03a..8452a3fe 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -627,7 +627,7 @@ GEM
     powerpack (0.1.2)
     public_suffix (3.0.3)
     pul_uv_rails (2.0.1)
-    puma (3.12.1)
+    puma (3.12.4)
     qa (2.2.0)
       activerecord-import
       deprecation
@@ -967,7 +967,7 @@ DEPENDENCIES
   omniauth
   omniauth-saml
   orcid!
-  puma (~> 3.7)
+  puma (~> 3.12)
   rack-attack
   rails (~> 5.1.6.1)
   redis (~> 4.0)