diff --git a/package-lock.json b/package-lock.json
index 141799cb1c5..28c6c7cb21b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2172,11 +2172,34 @@
         "graphql-subscriptions": "^1.0.0",
         "graphql-tag": "^2.9.2",
         "graphql-tools": "^4.0.0",
-        "graphql-upload": "^8.0.0",
+        "graphql-upload": "^8.0.2",
         "json-stable-stringify": "^1.0.1",
         "lodash": "^4.17.10",
         "subscriptions-transport-ws": "^0.9.11",
         "ws": "^6.0.0"
+      },
+      "dependencies": {
+        "graphql-upload": {
+          "version": "8.0.2",
+          "bundled": true,
+          "requires": {
+            "busboy": "^0.2.14",
+            "fs-capacitor": "^1.0.0",
+            "http-errors": "^1.7.1",
+            "object-path": "^0.11.4"
+          }
+        },
+        "http-errors": {
+          "version": "1.7.1",
+          "bundled": true,
+          "requires": {
+            "depd": "~1.1.2",
+            "inherits": "2.0.3",
+            "setprototypeof": "1.1.0",
+            "statuses": ">= 1.5.0 < 2",
+            "toidentifier": "1.0.0"
+          }
+        }
       }
     },
     "apollo-server-env": {
@@ -6296,31 +6319,6 @@
         "uuid": "^3.1.0"
       }
     },
-    "graphql-upload": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/graphql-upload/-/graphql-upload-8.0.0.tgz",
-      "integrity": "sha512-DlEi6+Kblj6gAAA5XJahJl1+UfcXICiFypJYIxd4zK26W2/LKm6nwLmSWjECwbAkz/OtB+oSWGb5gqXCDQOLqg==",
-      "requires": {
-        "busboy": "^0.2.14",
-        "fs-capacitor": "^1.0.0",
-        "http-errors": "^1.7.1",
-        "object-path": "^0.11.4"
-      },
-      "dependencies": {
-        "http-errors": {
-          "version": "1.7.1",
-          "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-1.7.1.tgz",
-          "integrity": "sha512-jWEUgtZWGSMba9I1N3gc1HmvpBUaNC9vDdA46yScAdp+C5rdEuKWUBLWTQpW9FwSWSbYYs++b6SDCxf9UEJzfw==",
-          "requires": {
-            "depd": "~1.1.2",
-            "inherits": "2.0.3",
-            "setprototypeof": "1.1.0",
-            "statuses": ">= 1.5.0 < 2",
-            "toidentifier": "1.0.0"
-          }
-        }
-      }
-    },
     "growly": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz",
diff --git a/packages/apollo-server-core/package.json b/packages/apollo-server-core/package.json
index fdb032e930a..3aeacd326e1 100644
--- a/packages/apollo-server-core/package.json
+++ b/packages/apollo-server-core/package.json
@@ -39,7 +39,7 @@
     "graphql-subscriptions": "^1.0.0",
     "graphql-tag": "^2.9.2",
     "graphql-tools": "^4.0.0",
-    "graphql-upload": "^8.0.0",
+    "graphql-upload": "^8.0.2",
     "json-stable-stringify": "^1.0.1",
     "lodash": "^4.17.10",
     "subscriptions-transport-ws": "^0.9.11",