diff --git a/Gemfile b/Gemfile
index 98835cd1b..ceb1e991a 100644
--- a/Gemfile
+++ b/Gemfile
@@ -40,7 +40,7 @@ gem 'omniauth-rails_csrf_protection', '~> 1.0'
 gem 'omniauth-saml', '~> 2.2'
 
 # Authorization
-gem 'pundit', '2.4.0'
+gem 'pundit', '2.5.1'
 
 # Background tasks
 gem 'sidekiq', '~> 7.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index f2b7f9148..95c148af0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -130,10 +130,10 @@ GEM
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.2)
-    base64 (0.2.0)
+    base64 (0.3.0)
     bcp47_spec (0.2.1)
     bcrypt (3.1.20)
-    benchmark (0.4.0)
+    benchmark (0.4.1)
     better_errors (2.10.1)
       erubi (>= 1.0.0)
       rack (>= 0.9.0)
@@ -145,7 +145,7 @@ GEM
       erubi (~> 1.4)
       parser (>= 2.4)
       smart_properties
-    bigdecimal (3.1.9)
+    bigdecimal (3.2.3)
     bindex (0.8.1)
     binding_of_caller (1.0.1)
       debug_inspector (>= 1.2.0)
@@ -214,7 +214,7 @@ GEM
       activesupport (>= 5.0)
       request_store (>= 1.0)
       ruby2_keywords
-    drb (2.2.1)
+    drb (2.2.3)
     ebnf (2.4.0)
       htmlentities (~> 4.3)
       rdf (~> 3.3)
@@ -339,7 +339,7 @@ GEM
       logger (~> 1.6)
     link_header (0.0.8)
     lint_roller (1.1.0)
-    logger (1.6.6)
+    logger (1.7.0)
     loofah (2.24.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
@@ -355,7 +355,7 @@ GEM
       logger
     mini_mime (1.1.5)
     mini_portile2 (2.8.8)
-    minitest (5.25.4)
+    minitest (5.25.5)
     minitest-retry (0.2.5)
       minitest (>= 5.0)
     msgpack (1.7.2)
@@ -413,7 +413,7 @@ GEM
     public_suffix (6.0.1)
     puma (6.6.0)
       nio4r (~> 2.0)
-    pundit (2.4.0)
+    pundit (2.5.1)
       activesupport (>= 3.0.0)
     raabro (1.4.0)
     racc (1.8.1)
@@ -696,7 +696,7 @@ DEPENDENCIES
   paper_trail (~> 16.0.0)
   pg (~> 1.5.9)
   puma (~> 6.6)
-  pundit (= 2.4.0)
+  pundit (= 2.5.1)
   rails (~> 7.1.3)
   ransack (= 4.3.0)
   rdf (~> 3.3.2)