diff --git a/package-lock.json b/package-lock.json
index 1688e2027..87cb17791 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14244,10 +14244,13 @@
       }
     },
     "node_modules/postal-mime": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/postal-mime/-/postal-mime-3.0.1.tgz",
-      "integrity": "sha512-N86EnYOxZjW1uHQIgSXnnRdnJz+wxmtDsnk3C4R/9rQ1utj8A2znauXZ3Q3+stCHxG5ckY4/NrO09WiPU6rcdQ==",
-      "license": "MIT-0"
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/postal-mime/-/postal-mime-4.2.0.tgz",
+      "integrity": "sha512-QG5Rh8wY/zjwFF1lKWcBbwWcAWR5jWodmMPL4gMik43XDLebtWoAAPyG0lrE2kYYZ5IHTASrepGuGO0YIwNKAg==",
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20"
+      }
     },
     "node_modules/postcss": {
       "version": "8.5.26",
@@ -18301,7 +18304,7 @@
         "openai": "^6.34.0",
         "otpauth": "^9.5.2",
         "pg": "^8.21.0",
-        "postal-mime": "^3.0.1",
+        "postal-mime": "^4.2.0",
         "replicate": "^1.0.0",
         "sharp": "^0.35.5",
         "smtp-server": "^3.19.24",
@@ -19120,7 +19123,7 @@
         "@heyputer/kv.js": "^0.2.1",
         "open": "^10.2.0",
         "path-browserify": "1.0.1",
-        "postal-mime": "^3.0.1",
+        "postal-mime": "^4.2.0",
         "socket.io-client": "^4.8.4"
       },
       "devDependencies": {
diff --git a/src/backend/package.json b/src/backend/package.json
index f2a27422c..5f4d3559b 100644
--- a/src/backend/package.json
+++ b/src/backend/package.json
@@ -57,7 +57,7 @@
     "openai": "^6.34.0",
     "otpauth": "^9.5.2",
     "pg": "^8.21.0",
-    "postal-mime": "^3.0.1",
+    "postal-mime": "^4.2.0",
     "replicate": "^1.0.0",
     "sharp": "^0.35.5",
     "smtp-server": "^3.19.24",
diff --git a/src/puter-js/package.json b/src/puter-js/package.json
index e4a79fa00..9c9f09960 100644
--- a/src/puter-js/package.json
+++ b/src/puter-js/package.json
@@ -54,7 +54,7 @@
         "@heyputer/kv.js": "^0.2.1",
         "open": "^10.2.0",
         "path-browserify": "1.0.1",
-        "postal-mime": "^3.0.1",
+        "postal-mime": "^4.2.0",
         "socket.io-client": "^4.8.4"
     }
 }