diff --git a/poetry.lock b/poetry.lock
index 76fa2ec..31f30d7 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -916,14 +916,14 @@ cli = ["click (>=5.0)"]
 
 [[package]]
 name = "python-multipart"
-version = "0.0.22"
+version = "0.0.27"
 description = "A streaming multipart parser for Python"
 optional = false
 python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "python_multipart-0.0.22-py3-none-any.whl", hash = "sha256:2b2cd894c83d21bf49d702499531c7bafd057d730c201782048f7945d82de155"},
-    {file = "python_multipart-0.0.22.tar.gz", hash = "sha256:7340bef99a7e0032613f56dc36027b959fd3b30a787ed62d310e951f7c3a3a58"},
+    {file = "python_multipart-0.0.27-py3-none-any.whl", hash = "sha256:6fccfad17a27334bd0193681b369f476eda3409f17381a2d65aa7df3f7275645"},
+    {file = "python_multipart-0.0.27.tar.gz", hash = "sha256:9870a6a8c5a20a5bf4f07c017bd1489006ff8836cff097b6933355ee2b49b602"},
 ]
 
 [[package]]
@@ -1046,4 +1046,4 @@ standard = ["colorama (>=0.4) ; sys_platform == \"win32\"", "httptools (>=0.6.3)
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.11"
-content-hash = "a35679608a21f647756c45c6d6912ed12d77eb9874d0e30c1d6399e38653d591"
+content-hash = "be7f2d683a3b7994eab3e9e08c8f5ee25dc13f6e4bc2ec122e07568daac50978"
diff --git a/pyproject.toml b/pyproject.toml
index 048eeb1..8c62204 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -13,7 +13,7 @@ python = "^3.11"
 fastapi = "^0.129.0"
 jinja2 = "^3.1.6"
 uvicorn = "^0.40.0"
-python-multipart = "^0.0.22"
+python-multipart = ">=0.0.22,<0.0.28"
 aiofiles = "^25.1.0"
 requests = "^2.32.5"
 fastapi-utils = "^0.8.0"