diff --git a/Gemfile b/Gemfile
index 7879190cad..b96afdc05b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -11,7 +11,7 @@ gem "authtrail" # Track Devise login activity
 gem "azure-storage-blob", require: false
 gem "blueprinter" # for JSON serialization
 gem "bugsnag" # tracking errors in prod
-gem "caxlsx", "~> 4.1" # excel spreadsheets - TODO can we remove this version restriction?
+gem "caxlsx", "~> 4.2" # excel spreadsheets - TODO can we remove this version restriction?
 gem "caxlsx_rails", "~> 0.6.4" # excel spreadsheets - TODO can we remove this version restriction?
 gem "cssbundling-rails", "~> 1.4" # compiles css
 gem "delayed_job_active_record"
diff --git a/Gemfile.lock b/Gemfile.lock
index c4998628b8..c6951cd1f2 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -132,7 +132,7 @@ GEM
     capybara-screenshot (1.0.26)
       capybara (>= 1.0, < 4)
       launchy
-    caxlsx (4.1.0)
+    caxlsx (4.2.0)
       htmlentities (~> 4.3, >= 4.3.4)
       marcel (~> 1.0)
       nokogiri (~> 1.10, >= 1.10.4)
@@ -615,7 +615,7 @@ DEPENDENCIES
   byebug
   capybara
   capybara-screenshot
-  caxlsx (~> 4.1)
+  caxlsx (~> 4.2)
   caxlsx_rails (~> 0.6.4)
   cssbundling-rails (~> 1.4)
   database_cleaner-active_record