diff --git a/package.json b/package.json
index 3a053384ed..f6b372e861 100644
--- a/package.json
+++ b/package.json
@@ -100,7 +100,7 @@
     "mobiledoc-dom-renderer": "0.6.6",
     "moment": "2.24.0",
     "moment-timezone": "0.5.23",
-    "multer": "1.4.1",
+    "multer": "1.4.2",
     "mysql": "2.17.1",
     "nconf": "0.10.0",
     "netjet": "1.3.0",
diff --git a/yarn.lock b/yarn.lock
index 97e69614b7..284adbe12a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5101,7 +5101,21 @@ ms@2.1.1, ms@^2.0.0, ms@^2.1.1:
   version "2.1.1"
   resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a"
 
-multer@1.4.1, multer@^1.1.0:
+multer@1.4.2:
+  version "1.4.2"
+  resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.2.tgz#2f1f4d12dbaeeba74cb37e623f234bf4d3d2057a"
+  integrity sha512-xY8pX7V+ybyUpbYMxtjM9KAiD9ixtg5/JkeKUTD6xilfDv0vzzOFcCp4Ljb1UU3tSOM3VTZtKo63OmzOrGi3Cg==
+  dependencies:
+    append-field "^1.0.0"
+    busboy "^0.2.11"
+    concat-stream "^1.5.2"
+    mkdirp "^0.5.1"
+    object-assign "^4.1.1"
+    on-finished "^2.3.0"
+    type-is "^1.6.4"
+    xtend "^4.0.0"
+
+multer@^1.1.0:
   version "1.4.1"
   resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.1.tgz#24b12a416a22fec2ade810539184bf138720159e"
   dependencies: