diff --git a/packages/cloudinary/package.json b/packages/cloudinary/package.json
index 08a228ad4b7..c0651c757c7 100644
--- a/packages/cloudinary/package.json
+++ b/packages/cloudinary/package.json
@@ -31,7 +31,7 @@
     "@types/express": "^4.17.14",
     "@types/react": "^18.3.3",
     "graphql": "^16.8.1",
-    "graphql-upload": "^15.0.2"
+    "graphql-upload": "^17.0.0"
   },
   "preconstruct": {
     "entrypoints": [
diff --git a/packages/core/package.json b/packages/core/package.json
index 4c8c1cf54fd..b5ffaec1fe6 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -255,7 +255,7 @@
     "file-type": "^19.0.0",
     "fs-extra": "^11.0.0",
     "graphql": "^16.8.1",
-    "graphql-upload": "^15.0.2",
+    "graphql-upload": "^17.0.0",
     "image-size": "^1.0.0",
     "inflection": "^3.0.0",
     "intersection-observer": "^0.12.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 98c61c6a7b3..f1d704bbc6f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1560,8 +1560,8 @@ importers:
         specifier: ^16.8.1
         version: 16.10.0
       graphql-upload:
-        specifier: ^15.0.2
-        version: 15.0.2(@types/express@4.17.21)(graphql@16.10.0)
+        specifier: ^17.0.0
+        version: 17.0.0(@types/express@4.17.21)(graphql@16.10.0)
 
   packages/core:
     dependencies:
@@ -1692,8 +1692,8 @@ importers:
         specifier: ^16.8.1
         version: 16.10.0
       graphql-upload:
-        specifier: ^15.0.2
-        version: 15.0.2(@types/express@4.17.21)(graphql@16.10.0)
+        specifier: ^17.0.0
+        version: 17.0.0(@types/express@4.17.21)(graphql@16.10.0)
       image-size:
         specifier: ^1.0.0
         version: 1.2.0
@@ -7707,6 +7707,10 @@ packages:
     resolution: {integrity: sha512-nKcE1UduoSKX27NSZlg879LdQc94OtbOsEmKMN2MBNudXREvijRKx2GEBsTMTfws+BrbkJoEuynbGSVRSpauvw==}
     engines: {node: '>=10'}
 
+  fs-capacitor@8.0.0:
+    resolution: {integrity: sha512-+Lk6iSKajdGw+7XYxUkwIzreJ2G1JFlYOdnKJv5PzwFLVsoJYBpCuS7WPIUSNT1IbQaEWT1nhYU63Ud03DyzLA==}
+    engines: {node: ^14.17.0 || >=16.0.0}
+
   fs-constants@1.0.0:
     resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
 
@@ -7911,6 +7915,19 @@ packages:
       '@types/koa':
         optional: true
 
+  graphql-upload@17.0.0:
+    resolution: {integrity: sha512-AI42S1UR1mdqg+LQ7KqGbrgcf4l9gpPu/R0drM4vSA5C94NfIjYyCeCdpktEledvZoAL8JURLLeB53++WACo1w==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=22.0.0}
+    peerDependencies:
+      '@types/express': 4.0.29 - 5
+      '@types/koa': ^2.11.4
+      graphql: ^16.3.0
+    peerDependenciesMeta:
+      '@types/express':
+        optional: true
+      '@types/koa':
+        optional: true
+
   graphql-ws@5.16.2:
     resolution: {integrity: sha512-E1uccsZxt/96jH/OwmLPuXMACILs76pKF2i3W861LpKBCYtGIyPQGtWLuBLkND4ox1KHns70e83PS4te50nvPQ==}
     engines: {node: '>=10'}
@@ -19373,6 +19390,8 @@ snapshots:
 
   fs-capacitor@6.2.0: {}
 
+  fs-capacitor@8.0.0: {}
+
   fs-constants@1.0.0: {}
 
   fs-extra@10.1.0:
@@ -19611,6 +19630,19 @@ snapshots:
     optionalDependencies:
       '@types/express': 4.17.21
 
+  graphql-upload@17.0.0(@types/express@4.17.21)(graphql@16.10.0):
+    dependencies:
+      '@types/busboy': 1.5.4
+      '@types/node': 22.13.0
+      '@types/object-path': 0.11.4
+      busboy: 1.6.0
+      fs-capacitor: 8.0.0
+      graphql: 16.10.0
+      http-errors: 2.0.0
+      object-path: 0.11.8
+    optionalDependencies:
+      '@types/express': 4.17.21
+
   graphql-ws@5.16.2(graphql@16.10.0):
     dependencies:
       graphql: 16.10.0