diff --git a/packages/uploads/package.json b/packages/uploads/package.json
index b3cc792e..bbf3a27b 100644
--- a/packages/uploads/package.json
+++ b/packages/uploads/package.json
@@ -33,7 +33,7 @@
   "dependencies": {
     "aws-sdk": "^2.1105.0",
     "fs": "^0.0.1-security",
-    "multer": "^1.4.4",
+    "multer": "^2.0.1",
     "multer-azure-blob-storage": "^1.1.0",
     "multer-google-storage": "^1.3.0",
     "multer-s3": "^2.10.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9b138611..e7d08435 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -248,7 +248,7 @@ importers:
   packages/fluent-firebase:
     dependencies:
       '@goatlab/fluent':
-        specifier: ^0.7.38
+        specifier: ^0.7.39
         version: link:../fluent
       '@goatlab/js-utils':
         specifier: workspace:*
@@ -1356,8 +1356,8 @@ importers:
         specifier: ^0.0.1-security
         version: 0.0.1-security
       multer:
-        specifier: ^1.4.4
-        version: 1.4.4
+        specifier: ^2.0.1
+        version: 2.0.1
       multer-azure-blob-storage:
         specifier: ^1.1.0
         version: 1.2.0
@@ -4399,6 +4399,10 @@ packages:
     resolution: {integrity: sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==}
     engines: {'0': node >= 0.8}
 
+  concat-stream@2.0.0:
+    resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
+    engines: {'0': node >= 6.0}
+
   condense-whitespace@2.0.0:
     resolution: {integrity: sha512-Ath9o58/0rxZXbyoy3zZgrVMoIemi30sukG/btuMKCLyqfQt3dNOWc9N3EHEMa2Q3i0tXQPDJluYFLwy7pJuQw==}
     engines: {node: '>=8'}
@@ -7711,6 +7715,10 @@ packages:
     engines: {node: '>= 6.0.0'}
     deprecated: Multer 1.x is impacted by a number of vulnerabilities, which have been patched in 2.x. You should upgrade to the latest 2.x version.
 
+  multer@2.0.1:
+    resolution: {integrity: sha512-Ug8bXeTIUlxurg8xLTEskKShvcKDZALo1THEX5E41pYCD2sCVub5/kIRIGqWNoqV6szyLyQKV6mD4QUrWE5GCQ==}
+    engines: {node: '>= 10.16.0'}
+
   mute-stream@0.0.6:
     resolution: {integrity: sha512-m0kBTDLF/0lgzCsPVmJSKM5xkLNX7ZAB0Q+n2DP37JMIRPVC2R4c3BdO6x++bXFKftbhvSfKgwxAexME+BRDRw==}
 
@@ -14906,6 +14914,13 @@ snapshots:
       readable-stream: 2.3.8
       typedarray: 0.0.6
 
+  concat-stream@2.0.0:
+    dependencies:
+      buffer-from: 1.1.2
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+      typedarray: 0.0.6
+
   condense-whitespace@2.0.0: {}
 
   confbox@0.1.8: {}
@@ -19350,6 +19365,16 @@ snapshots:
       type-is: 1.6.18
       xtend: 4.0.2
 
+  multer@2.0.1:
+    dependencies:
+      append-field: 1.0.0
+      busboy: 1.6.0
+      concat-stream: 2.0.0
+      mkdirp: 0.5.6
+      object-assign: 4.1.1
+      type-is: 1.6.18
+      xtend: 4.0.2
+
   mute-stream@0.0.6: {}
 
   mute-stream@0.0.7: {}