diff --git a/docker/Dockerfile b/docker/Dockerfile
index 47b317668..8d92c4042 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -13,7 +13,10 @@ RUN apk add --no-cache git python3 py3-pip make g++ build-base cairo-dev pango-d
 ENV PUPPETEER_SKIP_DOWNLOAD=true
 
 # Install latest Flowise globally (specific version can be set: flowise@1.0.0)
-RUN npm install -g flowise
+# npm dedupe is required after install: npm's overrides resolver does not
+# consistently collapse every duplicate of an overridden package in one pass
+# on a tree this size/complexity
+RUN npm install -g flowise && npm --prefix "$(npm root -g)/flowise" dedupe
 
 # Stage 2: Runtime stage
 FROM node:${NODE_VERSION}-alpine
diff --git a/package.json b/package.json
index 7948b640f..f2952f758 100644
--- a/package.json
+++ b/package.json
@@ -99,7 +99,7 @@
             "tmp": ">=0.2.4",
             "@elastic/transport": ">=8.9.3",
             "@modelcontextprotocol/sdk": ">=1.25.2",
-            "multer": ">=2.1.1"
+            "multer": "2.2.0"
         }
     },
     "engines": {
diff --git a/packages/agentflow/package.json b/packages/agentflow/package.json
index 0409c4def..ad5ef625f 100644
--- a/packages/agentflow/package.json
+++ b/packages/agentflow/package.json
@@ -67,6 +67,36 @@
         "react-dom": "^18.2.0",
         "reactflow": "^11.5.0"
     },
+    "overrides": {
+        "prebuild-install": "7.1.3",
+        "axios": "1.15.0",
+        "body-parser": "2.0.2",
+        "braces": "3.0.3",
+        "cross-spawn": "7.0.6",
+        "form-data": "4.0.4",
+        "glob-parent": "6.0.2",
+        "http-proxy-middleware": "3.0.3",
+        "json5": "2.2.3",
+        "nth-check": "2.1.1",
+        "path-to-regexp": "0.1.12",
+        "prismjs": "1.29.0",
+        "rollup": "4.45.0",
+        "semver": "7.7.1",
+        "set-value": "4.1.0",
+        "solid-js": "1.9.11",
+        "protobufjs": ">=7.5.5",
+        "tar-fs": "3.1.1",
+        "unset-value": "2.0.1",
+        "webpack-dev-middleware": "7.4.2",
+        "ws": "8.18.3",
+        "xlsx": "0.18.5",
+        "uuid": "^10.0.0",
+        "@tootallnate/once": ">=3.0.1",
+        "tmp": ">=0.2.4",
+        "@elastic/transport": ">=8.9.3",
+        "@modelcontextprotocol/sdk": ">=1.25.2",
+        "multer": "2.2.0"
+    },
     "dependencies": {
         "@codemirror/lang-javascript": "^6.2.0",
         "@codemirror/lang-json": "^6.0.0",
diff --git a/packages/components/package.json b/packages/components/package.json
index 89517058f..03b6e8bcb 100644
--- a/packages/components/package.json
+++ b/packages/components/package.json
@@ -30,6 +30,35 @@
         "email": "henryheng@flowiseai.com"
     },
     "license": "SEE LICENSE IN LICENSE.md",
+    "overrides": {
+        "prebuild-install": "7.1.3",
+        "axios": "1.15.0",
+        "body-parser": "2.0.2",
+        "braces": "3.0.3",
+        "cross-spawn": "7.0.6",
+        "form-data": "^4.0.4",
+        "glob-parent": "6.0.2",
+        "http-proxy-middleware": "3.0.3",
+        "json5": "2.2.3",
+        "nth-check": "2.1.1",
+        "path-to-regexp": "0.1.12",
+        "prismjs": "1.29.0",
+        "rollup": "4.45.0",
+        "semver": "7.7.1",
+        "set-value": "4.1.0",
+        "solid-js": "1.9.11",
+        "protobufjs": ">=7.5.5",
+        "tar-fs": "3.1.1",
+        "unset-value": "2.0.1",
+        "webpack-dev-middleware": "7.4.2",
+        "ws": "^8.18.3",
+        "xlsx": "0.18.5",
+        "uuid": "^10.0.0",
+        "@tootallnate/once": ">=3.0.1",
+        "tmp": ">=0.2.4",
+        "@elastic/transport": ">=8.9.3",
+        "multer": "2.2.0"
+    },
     "dependencies": {
         "@anthropic-ai/sdk": "^0.73.0",
         "@apidevtools/json-schema-ref-parser": "^11.7.0",
@@ -183,7 +212,7 @@
         "vm2": "3.11.2",
         "weaviate-client": "3.12.0",
         "winston": "^3.9.0",
-        "ws": "^8.18.0",
+        "ws": "^8.18.3",
         "xlsx": "0.18.5",
         "zod": "^3.25.76 || ^4",
         "zod-to-json-schema": "^3.24.6"
diff --git a/packages/observe/package.json b/packages/observe/package.json
index cf8e060b7..762370656 100644
--- a/packages/observe/package.json
+++ b/packages/observe/package.json
@@ -64,6 +64,36 @@
         "react": "^18.2.0",
         "react-dom": "^18.2.0"
     },
+    "overrides": {
+        "prebuild-install": "7.1.3",
+        "axios": "1.15.0",
+        "body-parser": "2.0.2",
+        "braces": "3.0.3",
+        "cross-spawn": "7.0.6",
+        "form-data": "4.0.4",
+        "glob-parent": "6.0.2",
+        "http-proxy-middleware": "3.0.3",
+        "json5": "2.2.3",
+        "nth-check": "2.1.1",
+        "path-to-regexp": "0.1.12",
+        "prismjs": "1.29.0",
+        "rollup": "4.45.0",
+        "semver": "7.7.1",
+        "set-value": "4.1.0",
+        "solid-js": "1.9.11",
+        "protobufjs": ">=7.5.5",
+        "tar-fs": "3.1.1",
+        "unset-value": "2.0.1",
+        "webpack-dev-middleware": "7.4.2",
+        "ws": "8.18.3",
+        "xlsx": "0.18.5",
+        "uuid": "^10.0.0",
+        "@tootallnate/once": ">=3.0.1",
+        "tmp": ">=0.2.4",
+        "@elastic/transport": ">=8.9.3",
+        "@modelcontextprotocol/sdk": ">=1.25.2",
+        "multer": "2.2.0"
+    },
     "dependencies": {
         "@mui/x-tree-view": "^7.25.0",
         "@tabler/icons-react": "^3.7.0",
diff --git a/packages/server/package.json b/packages/server/package.json
index bd54bf722..beca5fb43 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -61,6 +61,35 @@
         "node": "^24"
     },
     "license": "SEE LICENSE IN LICENSE.md",
+    "overrides": {
+        "prebuild-install": "7.1.3",
+        "axios": "1.15.0",
+        "body-parser": "2.0.2",
+        "braces": "3.0.3",
+        "cross-spawn": "7.0.6",
+        "form-data": "4.0.4",
+        "glob-parent": "6.0.2",
+        "http-proxy-middleware": "3.0.3",
+        "json5": "2.2.3",
+        "nth-check": "2.1.1",
+        "path-to-regexp": "0.1.12",
+        "prismjs": "1.29.0",
+        "rollup": "4.45.0",
+        "semver": "7.7.1",
+        "set-value": "4.1.0",
+        "solid-js": "1.9.11",
+        "protobufjs": ">=7.5.5",
+        "tar-fs": "3.1.1",
+        "unset-value": "2.0.1",
+        "webpack-dev-middleware": "7.4.2",
+        "ws": "8.18.3",
+        "xlsx": "0.18.5",
+        "uuid": "^10.0.0",
+        "@tootallnate/once": ">=3.0.1",
+        "tmp": ">=0.2.4",
+        "@elastic/transport": ">=8.9.3",
+        "multer": "2.2.0"
+    },
     "dependencies": {
         "@aws-sdk/client-secrets-manager": "^3.1014.0",
         "@bull-board/api": "^6.11.0",
@@ -121,7 +150,7 @@
         "lodash": "^4.17.21",
         "moment": "^2.29.3",
         "moment-timezone": "^0.5.34",
-        "multer": "^2.1.1",
+        "multer": "2.2.0",
         "multer-azure-blob-storage": "^1.2.0",
         "multer-cloud-storage": "^4.0.0",
         "multer-s3": "^3.0.1",
diff --git a/packages/ui/package.json b/packages/ui/package.json
index b2f6bfdca..01f70a866 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -7,6 +7,36 @@
         "name": "HenryHeng",
         "email": "henryheng@flowiseai.com"
     },
+    "overrides": {
+        "prebuild-install": "7.1.3",
+        "axios": "1.15.0",
+        "body-parser": "2.0.2",
+        "braces": "3.0.3",
+        "cross-spawn": "7.0.6",
+        "form-data": "4.0.4",
+        "glob-parent": "6.0.2",
+        "http-proxy-middleware": "3.0.3",
+        "json5": "2.2.3",
+        "nth-check": "2.1.1",
+        "path-to-regexp": "0.1.12",
+        "prismjs": "1.29.0",
+        "rollup": "4.45.0",
+        "semver": "7.7.1",
+        "set-value": "4.1.0",
+        "solid-js": "1.9.11",
+        "protobufjs": ">=7.5.5",
+        "tar-fs": "3.1.1",
+        "unset-value": "2.0.1",
+        "webpack-dev-middleware": "7.4.2",
+        "ws": "8.18.3",
+        "xlsx": "0.18.5",
+        "uuid": "^10.0.0",
+        "@tootallnate/once": ">=3.0.1",
+        "tmp": ">=0.2.4",
+        "@elastic/transport": ">=8.9.3",
+        "@modelcontextprotocol/sdk": ">=1.25.2",
+        "multer": "2.2.0"
+    },
     "dependencies": {
         "@codemirror/lang-javascript": "^6.2.1",
         "@codemirror/lang-json": "^6.0.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2386babb5..2fc25eaa2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -39,7 +39,7 @@ overrides:
   tmp: '>=0.2.4'
   '@elastic/transport': '>=8.9.3'
   '@modelcontextprotocol/sdk': '>=1.25.2'
-  multer: '>=2.1.1'
+  multer: 2.2.0
 
 importers:
 
@@ -1106,7 +1106,7 @@ importers:
         specifier: ^0.5.34
         version: 0.5.45
       multer:
-        specifier: '>=2.1.1'
+        specifier: 2.2.0
         version: 2.2.0
       multer-azure-blob-storage:
         specifier: ^1.2.0