diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5409ac723..416fdd858 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [1.19.2](https://github.com/codeRIT/hackathon-manager/compare/v1.19.1...v1.19.2) (2019-10-07)
+
+
+### Bug Fixes
+
+*  update the gem rubyzip due to security issue reported by Hakiri ([#188](https://github.com/codeRIT/hackathon-manager/issues/188)) ([4fc9057](https://github.com/codeRIT/hackathon-manager/commit/4fc9057))
+
 ## [1.19.1](https://github.com/codeRIT/hackathon-manager/compare/v1.19.0...v1.19.1) (2019-10-07)
 
 
diff --git a/Gemfile b/Gemfile
index 61ef50cfb..12d620c25 100644
--- a/Gemfile
+++ b/Gemfile
@@ -86,7 +86,7 @@ gem 'sparkpost_rails'
 gem 'httparty'
 gem 'rollbar', '~> 2.8'
 gem 'skylight'
-gem 'rubyzip', '>= 1.0.0'
+gem 'rubyzip', '>= 1.3.0'
 gem 'rails_12factor', group: :production
 
 group :development, :test do
diff --git a/Gemfile.lock b/Gemfile.lock
index 50c984a24..ebd353f7b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -339,7 +339,7 @@ GEM
     ruby_dep (1.5.0)
     ruby_parser (3.13.1)
       sexp_processor (~> 4.9)
-    rubyzip (1.2.3)
+    rubyzip (1.3.0)
     safe_yaml (1.0.5)
     safely_block (0.2.2)
       errbase (>= 0.1.1)
@@ -495,7 +495,7 @@ DEPENDENCIES
   redis (~> 4.0)
   roadie-rails
   rollbar (~> 2.8)
-  rubyzip (>= 1.0.0)
+  rubyzip (>= 1.3.0)
   sass-rails (~> 5.0)
   selectize-rails
   selenium-webdriver