diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 382533c6ad..7ca1d97a94 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -768,8 +768,8 @@ importers:
         specifier: ^28.1.0
         version: 28.1.0(@noble/hashes@2.2.0)
       multer:
-        specifier: ^2.1.1
-        version: 2.1.1
+        specifier: ^2.2.0
+        version: 2.2.0
       open:
         specifier: ^11.0.0
         version: 11.0.0
@@ -6798,8 +6798,8 @@ packages:
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
-  multer@2.1.1:
-    resolution: {integrity: sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==}
+  multer@2.2.0:
+    resolution: {integrity: sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==}
     engines: {node: '>= 10.16.0'}
 
   nanoid@3.3.11:
@@ -14441,7 +14441,7 @@ snapshots:
 
   ms@2.1.3: {}
 
-  multer@2.1.1:
+  multer@2.2.0:
     dependencies:
       append-field: 1.0.0
       busboy: 1.6.0
diff --git a/server/package.json b/server/package.json
index 57ad93e392..cc41dc5818 100644
--- a/server/package.json
+++ b/server/package.json
@@ -71,7 +71,7 @@
     "embedded-postgres": "^18.1.0-beta.16",
     "express": "^5.1.0",
     "jsdom": "^28.1.0",
-    "multer": "^2.1.1",
+    "multer": "^2.2.0",
     "open": "^11.0.0",
     "pino": "^9.6.0",
     "pino-http": "^10.4.0",