diff --git a/Gemfile b/Gemfile
index 46c5be309..fd7040857 100644
--- a/Gemfile
+++ b/Gemfile
@@ -24,7 +24,7 @@ gem 'jquery-rails', '4.4.0'
 gem 'sass-rails', '~> 5.0', '>= 5.0.6'
 gem 'turbolinks', '~> 5.2.0'
 
-gem 'carrierwave', '~> 1.3.1'
+gem 'carrierwave', '~> 2.2.5'
 gem 'certified', '1.0.0'
 gem 'chronic', '0.10.2'
 gem 'cloudinary', '~> 1.25.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 5fbf3c588..364cc78cf 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -98,10 +98,13 @@ GEM
       rack-test (>= 0.6.3)
       regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
-    carrierwave (1.3.2)
-      activemodel (>= 4.0.0)
-      activesupport (>= 4.0.0)
-      mime-types (>= 1.16)
+    carrierwave (2.2.5)
+      activemodel (>= 5.0.0)
+      activesupport (>= 5.0.0)
+      addressable (~> 2.6)
+      image_processing (~> 1.1)
+      marcel (~> 1.0.0)
+      mini_mime (>= 0.1.3)
       ssrf_filter (~> 1.0)
     certified (1.0.0)
     choice (0.2.0)
@@ -207,6 +210,9 @@ GEM
     httpclient (2.8.3)
     i18n (1.14.1)
       concurrent-ruby (~> 1.0)
+    image_processing (1.12.2)
+      mini_magick (>= 4.9.5, < 5)
+      ruby-vips (>= 2.0.17, < 3)
     inline_svg (1.8.0)
       activesupport (>= 3.0)
       nokogiri (>= 1.6)
@@ -244,9 +250,10 @@ GEM
     matrix (0.4.2)
     memoist (0.16.2)
     method_source (1.0.0)
-    mime-types (3.4.1)
+    mime-types (3.5.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2022.0105)
+    mime-types-data (3.2023.1003)
+    mini_magick (4.12.0)
     mini_mime (1.1.2)
     minitest (5.20.0)
     mono_logger (1.1.0)
@@ -496,6 +503,8 @@ GEM
     ruby-graphviz (1.2.5)
       rexml
     ruby-progressbar (1.13.0)
+    ruby-vips (2.2.0)
+      ffi (~> 1.12)
     ruby2_keywords (0.0.5)
     rubyzip (1.3.0)
     rufus-scheduler (3.8.2)
@@ -558,7 +567,7 @@ GEM
       actionpack (>= 5.2)
       activesupport (>= 5.2)
       sprockets (>= 3.0.0)
-    ssrf_filter (1.1.1)
+    ssrf_filter (1.1.2)
     stringio (3.0.2)
     terser (1.1.14)
       execjs (>= 0.3.0, < 3)
@@ -613,7 +622,7 @@ DEPENDENCIES
   bundler-audit
   byebug
   capybara (~> 3.39.2)
-  carrierwave (~> 1.3.1)
+  carrierwave (~> 2.2.5)
   certified (= 1.0.0)
   chronic (= 0.10.2)
   cloudinary (~> 1.25.0)