diff --git a/apps/cashtab-faucet/package-lock.json b/apps/cashtab-faucet/package-lock.json
index 9ed727b0bb..52b5da239f 100644
--- a/apps/cashtab-faucet/package-lock.json
+++ b/apps/cashtab-faucet/package-lock.json
@@ -23,7 +23,7 @@
                 "express-rate-limit": "^7.4.0",
                 "helmet": "^7.1.0",
                 "mongodb": "^6.10.0",
-                "multer": "^1.4.5-lts.1",
+                "multer": "^2.0.1",
                 "node-telegram-bot-api": "^0.65.1",
                 "sharp": "^0.33.2",
                 "tiny-secp256k1": "^2.2.3"
@@ -14388,6 +14388,8 @@
         },
         "node_modules/buffer-from": {
             "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+            "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
             "license": "MIT"
         },
         "node_modules/busboy": {
@@ -14655,18 +14657,34 @@
             "license": "MIT"
         },
         "node_modules/concat-stream": {
-            "version": "1.6.2",
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
+            "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
             "engines": [
-                "node >= 0.8"
+                "node >= 6.0"
             ],
             "license": "MIT",
             "dependencies": {
                 "buffer-from": "^1.0.0",
                 "inherits": "^2.0.3",
-                "readable-stream": "^2.2.2",
+                "readable-stream": "^3.0.2",
                 "typedarray": "^0.0.6"
             }
         },
+        "node_modules/concat-stream/node_modules/readable-stream": {
+            "version": "3.6.2",
+            "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+            "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+            "license": "MIT",
+            "dependencies": {
+                "inherits": "^2.0.3",
+                "string_decoder": "^1.1.1",
+                "util-deprecate": "^1.0.1"
+            },
+            "engines": {
+                "node": ">= 6"
+            }
+        },
         "node_modules/content-disposition": {
             "version": "0.5.4",
             "license": "MIT",
@@ -16870,19 +16888,21 @@
             "license": "MIT"
         },
         "node_modules/multer": {
-            "version": "1.4.5-lts.1",
+            "version": "2.0.1",
+            "resolved": "https://registry.npmjs.org/multer/-/multer-2.0.1.tgz",
+            "integrity": "sha512-Ug8bXeTIUlxurg8xLTEskKShvcKDZALo1THEX5E41pYCD2sCVub5/kIRIGqWNoqV6szyLyQKV6mD4QUrWE5GCQ==",
             "license": "MIT",
             "dependencies": {
                 "append-field": "^1.0.0",
-                "busboy": "^1.0.0",
-                "concat-stream": "^1.5.2",
-                "mkdirp": "^0.5.4",
+                "busboy": "^1.6.0",
+                "concat-stream": "^2.0.0",
+                "mkdirp": "^0.5.6",
                 "object-assign": "^4.1.1",
-                "type-is": "^1.6.4",
-                "xtend": "^4.0.0"
+                "type-is": "^1.6.18",
+                "xtend": "^4.0.2"
             },
             "engines": {
-                "node": ">= 6.0.0"
+                "node": ">= 10.16.0"
             }
         },
         "node_modules/multer/node_modules/mkdirp": {
@@ -18713,6 +18733,8 @@
         },
         "node_modules/typedarray": {
             "version": "0.0.6",
+            "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
+            "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==",
             "license": "MIT"
         },
         "node_modules/typedarray-to-buffer": {
diff --git a/apps/cashtab-faucet/package.json b/apps/cashtab-faucet/package.json
index b473c006a4..5dedf2ac9c 100644
--- a/apps/cashtab-faucet/package.json
+++ b/apps/cashtab-faucet/package.json
@@ -61,7 +61,7 @@
         "express-rate-limit": "^7.4.0",
         "helmet": "^7.1.0",
         "mongodb": "^6.10.0",
-        "multer": "^1.4.5-lts.1",
+        "multer": "^2.0.1",
         "node-telegram-bot-api": "^0.65.1",
         "sharp": "^0.33.2",
         "tiny-secp256k1": "^2.2.3"