diff --git a/Gemfile b/Gemfile
index ed3a8c477d..b3cf29774e 100644
--- a/Gemfile
+++ b/Gemfile
@@ -47,7 +47,7 @@ gem 'virtus'
 gem 'rollbar', '~> 3.4.2'
 
 # for dfe sign in
-gem 'omniauth', '~> 2.1.1'
+gem 'omniauth', '~> 2.1.2'
 gem 'omniauth-oauth2', '~> 1.8.0'
 gem 'omniauth-rails_csrf_protection', '>= 1.0.1'
 # The omniauth_openid_connect is no longer maintained so does not work with omniauth 2.0.
diff --git a/Gemfile.lock b/Gemfile.lock
index 17cb628bfa..93a91b7141 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -364,7 +364,7 @@ GEM
       rack (>= 1.2, < 3)
       rash_alt (>= 0.4, < 1)
       version_gem (~> 1.1)
-    omniauth (2.1.1)
+    omniauth (2.1.2)
       hashie (>= 3.4.6)
       rack (>= 2.2.3)
       rack-protection
@@ -695,7 +695,7 @@ DEPENDENCIES
   kaminari (~> 1.2.2)
   launchy (>= 2.5.0)
   listen (>= 3.0.5, < 3.9)
-  omniauth (~> 2.1.1)
+  omniauth (~> 2.1.2)
   omniauth-oauth2 (~> 1.8.0)
   omniauth-rails_csrf_protection (>= 1.0.1)
   pg (>= 0.18, < 2.0)