diff --git a/.ci/runChecks.sh b/.ci/runChecks.sh
index 3192c5be4..82a4b7ee9 100755
--- a/.ci/runChecks.sh
+++ b/.ci/runChecks.sh
@@ -6,4 +6,4 @@ npm run lint:eslint
 npm run lint:prettier
 npm run --workspaces cdep
 npx --workspaces license-check
-npx better-npm-audit audit
+npx better-npm-audit audit --exclude 1109754
diff --git a/.dev/compose.backbone.yml b/.dev/compose.backbone.yml
index 3cc9106ee..fa11e4262 100644
--- a/.dev/compose.backbone.yml
+++ b/.dev/compose.backbone.yml
@@ -89,7 +89,7 @@ services:
   database:
     container_name: bkb-postgres
     hostname: postgres
-    image: postgres@sha256:28bda6d50590658221007b10573830c941b483e9d1a5bc2713a3f60477df8389
+    image: postgres@sha256:41bfa2e5b168fff0847a5286694a86cff102bdc4d59719869f6b117bb30b3a24
     environment:
       - POSTGRES_PASSWORD=Passw0rd
       - POSTGRES_DB=enmeshed
@@ -109,7 +109,7 @@ services:
   rabbitmq:
     container_name: bkb-rabbitmq
     hostname: rabbitmq
-    image: rabbitmq:4.2.0-alpine@sha256:3a20ab5bf4d3b178616ea2639c4970e22347d6eab45b4d9b6e390a1f7d165a61
+    image: rabbitmq:4.2.0-alpine@sha256:32962eea9bf99928c2fc541a7defb78c7feca9df0434c5dfb7b539d61e1af524
 
   ### seeds ###
 
diff --git a/package-lock.json b/package-lock.json
index fc99c58fe..3fdf4972b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1078,9 +1078,9 @@
             }
         },
         "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-            "version": "3.14.1",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-            "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+            "version": "3.14.2",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+            "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -5932,9 +5932,9 @@
             }
         },
         "node_modules/form-data": {
-            "version": "4.0.4",
-            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
-            "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
+            "version": "4.0.5",
+            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+            "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
             "license": "MIT",
             "dependencies": {
                 "asynckit": "^0.4.0",
@@ -7398,9 +7398,9 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "4.1.0",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-            "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+            "version": "4.1.1",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+            "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -11614,7 +11614,7 @@
                 "@nmshd/crypto": "2.1.3",
                 "axios": "^1.13.2",
                 "fast-json-patch": "^3.1.1",
-                "form-data": "^4.0.4",
+                "form-data": "^4.0.5",
                 "json-stringify-safe": "^5.0.1",
                 "lodash": "^4.17.21",
                 "luxon": "^3.7.2",
diff --git a/packages/transport/package.json b/packages/transport/package.json
index b3ac1470d..b187d40b8 100644
--- a/packages/transport/package.json
+++ b/packages/transport/package.json
@@ -73,7 +73,7 @@
         "@nmshd/crypto": "2.1.3",
         "axios": "^1.13.2",
         "fast-json-patch": "^3.1.1",
-        "form-data": "^4.0.4",
+        "form-data": "^4.0.5",
         "json-stringify-safe": "^5.0.1",
         "lodash": "^4.17.21",
         "luxon": "^3.7.2",