diff --git a/Gemfile b/Gemfile
index d1509fdcd0..ea5ed27c95 100644
--- a/Gemfile
+++ b/Gemfile
@@ -36,7 +36,7 @@ gem "paranoia" # For soft-deleting database objects
 gem "pdf-forms" # filling in fund request PDFs with user input
 gem "pg" # Use postgresql as the database for Active Record
 gem "pretender"
-gem "puma", "6.5.0" # 6.2.2 fails to install on m1 # Use Puma as the app server
+gem "puma", "6.6.0" # 6.2.2 fails to install on m1 # Use Puma as the app server
 gem "pundit" # for authorization management - based on user.role field
 gem "rack-attack" # for blocking & throttling abusive requests
 gem "rack-cors" # for allowing cross-origin resource sharing
diff --git a/Gemfile.lock b/Gemfile.lock
index 659353b237..6ad4d1f2fa 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -386,7 +386,7 @@ GEM
       date
       stringio
     public_suffix (6.0.1)
-    puma (6.5.0)
+    puma (6.6.0)
       nio4r (~> 2.0)
     pundit (2.4.0)
       activesupport (>= 3.0.0)
@@ -681,7 +681,7 @@ DEPENDENCIES
   pretender
   pry
   pry-byebug
-  puma (= 6.5.0)
+  puma (= 6.6.0)
   pundit
   rack-attack
   rack-cors