diff --git a/package.json b/package.json
index 12e337e239..82468b77bb 100644
--- a/package.json
+++ b/package.json
@@ -194,7 +194,7 @@
 		"mfm-js": "groundpolis/gpfm.js",
 		"moment": "2.29.4",
 		"ms": "2.1.3",
-		"multer": "1.4.5-lts.2",
+		"multer": "2.0.2",
 		"nested-property": "4.0.0",
 		"node-fetch": "2.6.13",
 		"nodemailer": "7.0.12",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 98ae126f19..848829ee61 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -48,7 +48,7 @@ importers:
         version: 3.1.0
       '@koa/multer':
         specifier: 3.0.2
-        version: 3.0.2(multer@1.4.5-lts.2)
+        version: 3.0.2(multer@2.0.2)
       '@koa/router':
         specifier: 9.0.1
         version: 9.0.1
@@ -464,8 +464,8 @@ importers:
         specifier: 2.1.3
         version: 2.1.3
       multer:
-        specifier: 1.4.5-lts.2
-        version: 1.4.5-lts.2
+        specifier: 2.0.2
+        version: 2.0.2
       nested-property:
         specifier: 4.0.0
         version: 4.0.0
@@ -2937,6 +2937,10 @@ packages:
     resolution: {integrity: sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==}
     engines: {'0': node >= 0.8}
 
+  concat-stream@2.0.0:
+    resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
+    engines: {'0': node >= 6.0}
+
   condense-newlines@0.2.1:
     resolution: {integrity: sha512-P7X+QL9Hb9B/c8HI5BFFKmjgBu2XpQuF98WZ9XkO+dBGgk5XgwiQz7o1SmpglNWId3581UcS0SFAWfoIhMHPfg==}
     engines: {node: '>=0.10.0'}
@@ -5342,10 +5346,9 @@ packages:
   msgpackr@1.11.7:
     resolution: {integrity: sha512-LXTGyT6FlVaL090rEEz4ZwfifKEj+tF4FOoaC6cEbHxvIDu8qc3QPXmLHKQO+XSOmvhbXZOCYPhFG4VCBZyJfQ==}
 
-  multer@1.4.5-lts.2:
-    resolution: {integrity: sha512-VzGiVigcG9zUAoCNU+xShztrlr1auZOlurXynNvO9GiWD1/mTBbUljOKY+qMeazBqXgRnjzeEgJI/wyjJUHg9A==}
-    engines: {node: '>= 6.0.0'}
-    deprecated: Multer 1.x is impacted by a number of vulnerabilities, which have been patched in 2.x. You should upgrade to the latest 2.x version.
+  multer@2.0.2:
+    resolution: {integrity: sha512-u7f2xaZ/UG8oLXHvtF/oWTRvT44p9ecwBBqTwgJVq0+4BW1g8OW01TyMEGWBHbyMOYVHXslaut7qEQ1meATXgw==}
+    engines: {node: '>= 10.16.0'}
 
   mute-stdout@1.0.1:
     resolution: {integrity: sha512-kDcwXR4PS7caBpuRYYBUz9iVixUk3anO3f5OYFiIPwK/20vCzKCHyKoulbiDY1S53zD2bxUpxN/IJ+TnXjfvxg==}
@@ -8730,10 +8733,10 @@ snapshots:
     dependencies:
       vary: 1.1.2
 
-  '@koa/multer@3.0.2(multer@1.4.5-lts.2)':
+  '@koa/multer@3.0.2(multer@2.0.2)':
     dependencies:
       fix-esm: 1.0.1
-      multer: 1.4.5-lts.2
+      multer: 2.0.2
     transitivePeerDependencies:
       - supports-color
 
@@ -10715,6 +10718,13 @@ snapshots:
       readable-stream: 2.3.8
       typedarray: 0.0.6
 
+  concat-stream@2.0.0:
+    dependencies:
+      buffer-from: 1.1.2
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+      typedarray: 0.0.6
+
   condense-newlines@0.2.1:
     dependencies:
       extend-shallow: 2.0.1
@@ -13416,11 +13426,11 @@ snapshots:
     optionalDependencies:
       msgpackr-extract: 3.0.3
 
-  multer@1.4.5-lts.2:
+  multer@2.0.2:
     dependencies:
       append-field: 1.0.0
       busboy: 1.6.0
-      concat-stream: 1.6.2
+      concat-stream: 2.0.0
       mkdirp: 0.5.6
       object-assign: 4.1.1
       type-is: 1.6.18