diff --git a/Gemfile b/Gemfile
index cbbab76edb8..f9ec3243a20 100644
--- a/Gemfile
+++ b/Gemfile
@@ -48,7 +48,7 @@ gem "searchkick", "~> 5.5"
 gem "faraday_middleware-aws-sigv4", "~> 1.0"
 gem "xml-simple", "~> 1.1"
 gem "compact_index", "~> 0.15.0"
-gem "rack-attack", "~> 6.6"
+gem "rack-attack", "~> 6.8"
 gem "rqrcode", "~> 3.1"
 gem "rotp", "~> 6.2"
 gem "unpwn", "~> 1.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 37b9c6da28d..35dd1d98d8d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -627,7 +627,7 @@ GEM
     raabro (1.4.0)
     racc (1.8.1)
     rack (3.2.4)
-    rack-attack (6.7.0)
+    rack-attack (6.8.0)
       rack (>= 1.0, < 4)
     rack-oauth2 (2.2.1)
       activesupport
@@ -1003,7 +1003,7 @@ DEPENDENCIES
   puma-plugin-statsd (~> 2.6)
   pundit (~> 2.5)
   rack (~> 3.2)
-  rack-attack (~> 6.6)
+  rack-attack (~> 6.8)
   rack-sanitizer (~> 2.0)
   rack-test (~> 2.2)
   rackup (~> 2.2)
@@ -1285,7 +1285,7 @@ CHECKSUMS
   raabro (1.4.0) sha256=d4fa9ff5172391edb92b242eed8be802d1934b1464061ae5e70d80962c5da882
   racc (1.8.1) sha256=4a7f6929691dbec8b5209a0b373bc2614882b55fc5d2e447a21aaa691303d62f
   rack (3.2.4) sha256=5d74b6f75082a643f43c1e76b419c40f0e5527fcfee1e669ac1e6b73c0ccb6f6
-  rack-attack (6.7.0) sha256=3ca47e8f66cd33b2c96af53ea4754525cd928ed3fa8da10ee6dad0277791d77c
+  rack-attack (6.8.0) sha256=f2499fdebf85bcc05573a22dff57d24305ac14ec2e4156cd3c28d47cafeeecf2
   rack-oauth2 (2.2.1) sha256=c73aa87c508043e2258f02b4fb110cacba9b37d2ccf884e22487d014a120d1a5
   rack-protection (4.2.1) sha256=cf6e2842df8c55f5e4d1a4be015e603e19e9bc3a7178bae58949ccbb58558bac
   rack-sanitizer (2.0.4) sha256=782ff5efb53177f6d2ab3a80ce07dbfecef8123a1e5c613160a38731e49e846c