diff --git a/Gemfile b/Gemfile
index f5da754b1a..504facf2e9 100644
--- a/Gemfile
+++ b/Gemfile
@@ -187,7 +187,7 @@ group :development do
   gem 'letter_opener_web', '~> 3.0'
 
   # Security analysis CLI tools
-  gem 'brakeman', '~> 7.0', require: false
+  gem 'brakeman', '~> 8.0', require: false
   gem 'bundler-audit', '~> 0.9', require: false
 
   # Linter CLI for HAML files
diff --git a/Gemfile.lock b/Gemfile.lock
index ee26939a26..25f9b0a756 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -131,7 +131,7 @@ GEM
     blurhash (0.1.8)
     bootsnap (1.20.1)
       msgpack (~> 1.2)
-    brakeman (7.1.2)
+    brakeman (8.0.1)
       racc
     browser (6.2.0)
     builder (3.3.0)
@@ -950,7 +950,7 @@ DEPENDENCIES
   binding_of_caller (~> 1.0)
   blurhash (~> 0.1)
   bootsnap
-  brakeman (~> 7.0)
+  brakeman (~> 8.0)
   browser
   bundler-audit (~> 0.9)
   capybara (~> 3.39)