diff --git a/Gemfile b/Gemfile
index a537bd3da3f..37605a19e5c 100644
--- a/Gemfile
+++ b/Gemfile
@@ -67,7 +67,7 @@ gem 'subprocess', require: false
 gem 'uglifier', '~> 4.2'
 gem 'valid_email', '>= 0.1.3'
 gem 'view_component', '~> 2.51.0'
-gem 'webauthn', '~> 2.1'
+gem 'webauthn', '~> 2.5.2'
 gem 'xmldsig', '~> 0.6'
 gem 'xmlenc', '~> 0.7', '>= 0.7.1'
 gem 'yard'
diff --git a/Gemfile.lock b/Gemfile.lock
index f451b897bfe..ae709ca7e1f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -184,7 +184,7 @@ GEM
       erubi (~> 1.4)
       parser (>= 2.4)
       smart_properties
-    bindata (2.4.10)
+    bindata (2.4.14)
     binding_of_caller (1.0.0)
       debug_inspector (>= 0.0.1)
     bootsnap (1.9.4)
@@ -216,7 +216,7 @@ GEM
       descendants_tracker (~> 0.0.1)
     concurrent-ruby (1.1.10)
     connection_pool (2.2.5)
-    cose (1.2.0)
+    cose (1.3.0)
       cbor (~> 0.5.9)
       openssl-signature_algorithm (~> 1.0)
     crack (0.4.5)
@@ -341,7 +341,6 @@ GEM
       terminal-table (>= 1.5.1)
     ice_nine (0.11.2)
     io-console (0.5.9)
-    ipaddr (1.2.4)
     irb (1.3.7)
       reline (>= 0.2.7)
     jmespath (1.6.2)
@@ -424,8 +423,7 @@ GEM
     octokit (5.1.0)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
-    openssl (2.2.1)
-      ipaddr
+    openssl (3.0.2)
     openssl-signature_algorithm (1.2.1)
       openssl (> 2.0, < 3.1)
     orm_adapter (0.5.0)
@@ -651,8 +649,9 @@ GEM
     thor (1.2.1)
     thread_safe (0.3.6)
     timeout (0.3.0)
-    tpm-key_attestation (0.10.0)
+    tpm-key_attestation (0.11.0)
       bindata (~> 2.4)
+      openssl (> 2.0, < 3.1)
       openssl-signature_algorithm (~> 1.0)
     tzinfo (2.0.5)
       concurrent-ruby (~> 1.0)
@@ -678,15 +677,15 @@ GEM
       descendants_tracker (~> 0.0, >= 0.0.3)
     warden (1.2.9)
       rack (>= 2.0.9)
-    webauthn (2.5.1)
+    webauthn (2.5.2)
       android_key_attestation (~> 0.3.0)
       awrence (~> 1.1)
       bindata (~> 2.4)
       cbor (~> 0.5.9)
       cose (~> 1.1)
-      openssl (~> 2.2)
+      openssl (>= 2.2, < 3.1)
       safety_net_attestation (~> 0.4.0)
-      tpm-key_attestation (~> 0.10.0)
+      tpm-key_attestation (~> 0.11.0)
     webdrivers (5.2.0)
       nokogiri (~> 1.6)
       rubyzip (>= 1.3.0)
@@ -825,7 +824,7 @@ DEPENDENCIES
   uglifier (~> 4.2)
   valid_email (>= 0.1.3)
   view_component (~> 2.51.0)
-  webauthn (~> 2.1)
+  webauthn (~> 2.5.2)
   webdrivers (~> 5.2.0)
   webmock
   xmldsig (~> 0.6)