diff --git a/package-lock.json b/package-lock.json
index 12585e1bb..a5aa3e532 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9419,7 +9419,9 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.2.0",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.3.0.tgz",
+      "integrity": "sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
@@ -13017,7 +13019,7 @@
         "jsonwebtoken": "^9.0.0",
         "kysely": "^0.28.14",
         "luxon": "^3.3.0",
-        "multer": "^2.2.0",
+        "multer": "^2.3.0",
         "pg": "^8.7.3",
         "pg-boss": "^8.0.0",
         "pg-cursor": "^2.21.0",
diff --git a/packages/backend/package.json b/packages/backend/package.json
index d249a5138..7cc8fab38 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -36,7 +36,7 @@
     "jsonwebtoken": "^9.0.0",
     "kysely": "^0.28.14",
     "luxon": "^3.3.0",
-    "multer": "^2.2.0",
+    "multer": "^2.3.0",
     "pg": "^8.7.3",
     "pg-boss": "^8.0.0",
     "pg-cursor": "^2.21.0",