diff --git a/Gemfile.lock b/Gemfile.lock
index 791791e8..81e09e55 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -16,7 +16,7 @@ PATH
       pickup (~> 0.0.11)
       prometheus-client (~> 2.0)
       puma (~> 5.0, >= 5.0.4)
-      rack (~> 2.2)
+      rack (>= 2.2, < 4.0)
       rake (~> 13.0)
       redis (~> 4.1)
       sinatra (~> 2.0)
@@ -105,7 +105,7 @@ GEM
       nio4r (~> 2.0)
     puma (5.6.5-java)
       nio4r (~> 2.0)
-    rack (2.2.6.2)
+    rack (2.2.6.4)
     rack-protection (2.2.4)
       rack
     rack-test (2.0.2)
diff --git a/vmpooler.gemspec b/vmpooler.gemspec
index 2d0c91e0..7d6b526c 100644
--- a/vmpooler.gemspec
+++ b/vmpooler.gemspec
@@ -30,7 +30,7 @@ Gem::Specification.new do |s|
   s.add_dependency 'pickup', '~> 0.0.11'
   s.add_dependency 'prometheus-client', '~> 2.0'
   s.add_dependency 'puma', '~> 5.0', '>= 5.0.4'
-  s.add_dependency 'rack', '~> 2.2'
+  s.add_dependency 'rack', '>= 2.2', '< 4.0'
   s.add_dependency 'rake', '~> 13.0'
   s.add_dependency 'redis', '~> 4.1'
   s.add_dependency 'sinatra', '~> 2.0'