diff --git a/package-lock.json b/package-lock.json
index fdd91b1497a..46ce03ba22e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -33,7 +33,7 @@
                 "express-basic-auth": "~1.2.1",
                 "express-static-gzip": "~2.1.7",
                 "feed": "^4.2.2",
-                "form-data": "~4.0.0",
+                "form-data": "~4.0.4",
                 "gamedig": "^4.2.0",
                 "html-escaper": "^3.0.3",
                 "http-cookie-agent": "~5.0.4",
@@ -9303,14 +9303,15 @@
             }
         },
         "node_modules/form-data": {
-            "version": "4.0.2",
-            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz",
-            "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==",
+            "version": "4.0.4",
+            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
+            "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
             "license": "MIT",
             "dependencies": {
                 "asynckit": "^0.4.0",
                 "combined-stream": "^1.0.8",
                 "es-set-tostringtag": "^2.1.0",
+                "hasown": "^2.0.2",
                 "mime-types": "^2.1.12"
             },
             "engines": {
diff --git a/package.json b/package.json
index 4a5aefd0da1..b9c9622d657 100644
--- a/package.json
+++ b/package.json
@@ -91,7 +91,7 @@
         "express-basic-auth": "~1.2.1",
         "express-static-gzip": "~2.1.7",
         "feed": "^4.2.2",
-        "form-data": "~4.0.0",
+        "form-data": "~4.0.4",
         "gamedig": "^4.2.0",
         "html-escaper": "^3.0.3",
         "http-cookie-agent": "~5.0.4",