diff --git a/package-lock.json b/package-lock.json
index 8f7f85828..495e51b54 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "@nextcloud/paths": "^2.1.0",
         "@nextcloud/router": "^3.0.1",
         "@nextcloud/sharing": "^0.1.0",
-        "@nextcloud/upload": "^1.0.4",
+        "@nextcloud/upload": "^1.0.5",
         "@nextcloud/vue": "^8.13.0",
         "blurhash": "^2.0.5",
         "camelcase": "^8.0.0",
@@ -4081,9 +4081,10 @@
       }
     },
     "node_modules/@nextcloud/upload": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/@nextcloud/upload/-/upload-1.0.4.tgz",
-      "integrity": "sha512-ntyNCuhnCluied3CYAdMWjQTjbfUW/kJmyyhwX0jBjjM+6vadm4EDGFuDp14m0WL1I5IMawe3CztwdBRMWs7QQ==",
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/@nextcloud/upload/-/upload-1.0.5.tgz",
+      "integrity": "sha512-QMojKvnBnxmxiKaFTpFIugaGsVQtjCvOrLdKzpa5IoNhouupI0vrE77aEXZuoOrhUHga9unN1YSA2hY0n8WrOQ==",
+      "license": "AGPL-3.0-or-later",
       "dependencies": {
         "@nextcloud/auth": "^2.2.1",
         "@nextcloud/axios": "^2.4.0",
@@ -4093,20 +4094,21 @@
         "@nextcloud/logger": "^2.7.0",
         "@nextcloud/paths": "^2.1.0",
         "@nextcloud/router": "^2.2.0",
+        "axios": "^1.6.2",
         "buffer": "^6.0.3",
         "crypto-browserify": "^3.12.0",
         "p-cancelable": "^4.0.1",
         "p-limit": "^5.0.0",
         "p-queue": "^8.0.0",
-        "simple-eta": "^3.0.2",
-        "vue": "^2.7.15"
+        "simple-eta": "^3.0.2"
       },
       "engines": {
         "node": "^20.0.0",
-        "npm": "^9.0.0"
+        "npm": "^10.0.0"
       },
       "peerDependencies": {
-        "@nextcloud/vue": "^8.0.0-beta || ^8.0.0"
+        "@nextcloud/vue": "^8.0.0-beta || ^8.0.0",
+        "vue": "^2.7.16"
       }
     },
     "node_modules/@nextcloud/upload/node_modules/@nextcloud/dialogs": {
@@ -4149,6 +4151,17 @@
         "npm": "^10.0.0"
       }
     },
+    "node_modules/@nextcloud/upload/node_modules/axios": {
+      "version": "1.7.9",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.9.tgz",
+      "integrity": "sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.6",
+        "form-data": "^4.0.0",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
     "node_modules/@nextcloud/upload/node_modules/brace-expansion": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -4195,6 +4208,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/@nextcloud/upload/node_modules/proxy-from-env": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+      "license": "MIT"
+    },
     "node_modules/@nextcloud/upload/node_modules/url-join": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/url-join/-/url-join-5.0.0.tgz",
diff --git a/package.json b/package.json
index 75308f08f..97c724b9b 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "@nextcloud/paths": "^2.1.0",
     "@nextcloud/router": "^3.0.1",
     "@nextcloud/sharing": "^0.1.0",
-    "@nextcloud/upload": "^1.0.4",
+    "@nextcloud/upload": "^1.0.5",
     "@nextcloud/vue": "^8.13.0",
     "blurhash": "^2.0.5",
     "camelcase": "^8.0.0",