diff --git a/package-lock.json b/package-lock.json
index 0a0531a5b..43d5e139a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14496,9 +14496,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "funding": [
         {
           "type": "github",
@@ -16396,9 +16396,9 @@
       }
     },
     "node_modules/isomorphic-dompurify/node_modules/undici": {
-      "version": "8.10.2",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.10.2.tgz",
-      "integrity": "sha512-/y4/bH9YNU5hi9NIrpOuvGXFcxrj3CMrV+/AYpowAYTpHn8gX/XPFjNy766FPoYY0miQhdW977JFWKGNhBdwyQ==",
+      "version": "8.12.3",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.3.tgz",
+      "integrity": "sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw==",
       "license": "MIT",
       "engines": {
         "node": ">=22.19.0"
@@ -18747,9 +18747,9 @@
       }
     },
     "node_modules/multer": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
-      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.5.0.tgz",
+      "integrity": "sha512-BsqOzYGVq49JcW2IzoSAxeKYRevb+dGGPPWleOR8Lrlk4igwxu1/9pwSXlByhCb7MVZDrNJFC0IBP5/O5nLYRw==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
@@ -18873,9 +18873,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "10.0.14",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.14.tgz",
-      "integrity": "sha512-eJoLFKg55fesSlzUekmfOv/SBXh4KUYT8oiQc2RLP0tfG0rbNMJBK7wgHJwXTJwqyKlSJMz9UzDZ4v+aHEvo8g==",
+      "version": "10.2.1",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.2.1.tgz",
+      "integrity": "sha512-ZrDNsPFoDMwefNs7sJwrYiEJ/CG4ClJWDZv05iNJsEBWa8GRDry1QJHTJxsuTAY9eDDKjX4k+q3SxslXJOao7w==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
@@ -23111,9 +23111,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.30.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.0.tgz",
-      "integrity": "sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==",
+      "version": "7.30.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
+      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"
@@ -25049,9 +25049,9 @@
         "json5": "^2.2.3",
         "jsonwebtoken": "^9.0.3",
         "kysely": "^0.29.6",
-        "multer": "^2.4.0",
+        "multer": "^2.5.0",
         "nestjs-zod": "^5.5.0",
-        "nodemailer": "^10.0.13",
+        "nodemailer": "^10.1.4",
         "otplib": "^12.0.1",
         "pdf-parse": "^2.4.5",
         "qrcode": "^1.5.4",
@@ -25062,7 +25062,7 @@
         "tsx": "^4.23.15",
         "typescript": "^6.0.3",
         "tz-lookup": "^6.1.25",
-        "undici": "^7.30.0",
+        "undici": "^7.30.1",
         "unzipper": "^0.12.5",
         "uuid": "^14.0.2",
         "ws": "^8.21.3",
diff --git a/package.json b/package.json
index fa62eabaa..ae80b501b 100644
--- a/package.json
+++ b/package.json
@@ -49,15 +49,16 @@
     "body-parser@^2.0.0": "^2.4.0",
     "brace-expansion@^2.0.0": "^2.1.7",
     "dompurify": "^3.4.17",
-    "fast-uri": "^3.1.8",
+    "fast-uri": "^3.1.9",
     "file-type": "^21.3.4",
     "hono": "^4.13.11",
     "ip-address": "^10.7.4",
     "js-yaml@^5.0.0": "^5.4.1",
-    "multer": "^2.4.0",
+    "multer": "^2.5.0",
     "proxy-addr": "^2.0.8",
     "qs": "^6.15.2",
     "source-map-js": "^1.2.2",
+    "undici@^8.0.0": "^8.12.2",
     "ws": "^8.21.3",
     "zod": "^4.6.7"
   },
diff --git a/server/package.json b/server/package.json
index 242a38893..6081e9a7d 100644
--- a/server/package.json
+++ b/server/package.json
@@ -93,9 +93,9 @@
     "json5": "^2.2.3",
     "jsonwebtoken": "^9.0.3",
     "kysely": "^0.29.6",
-    "multer": "^2.4.0",
+    "multer": "^2.5.0",
     "nestjs-zod": "^5.5.0",
-    "nodemailer": "^10.0.13",
+    "nodemailer": "^10.1.4",
     "otplib": "^12.0.1",
     "pdf-parse": "^2.4.5",
     "qrcode": "^1.5.4",
@@ -106,7 +106,7 @@
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",
     "tz-lookup": "^6.1.25",
-    "undici": "^7.30.0",
+    "undici": "^7.30.1",
     "unzipper": "^0.12.5",
     "uuid": "^14.0.2",
     "ws": "^8.21.3",