diff --git a/web/apps/photos/package.json b/web/apps/photos/package.json
index 1196b4ddf..0aa09f101 100644
--- a/web/apps/photos/package.json
+++ b/web/apps/photos/package.json
@@ -37,7 +37,7 @@
         "photoswipe": "file:./thirdparty/photoswipe",
         "piexifjs": "^1.0.6",
         "pure-react-carousel": "^1.30.1",
-        "react-dropzone": "^11.2.4",
+        "react-dropzone": "^14.2",
         "react-otp-input": "^2.3.1",
         "react-select": "^4.3.1",
         "react-top-loading-bar": "^2.0.1",
diff --git a/web/docs/dependencies.md b/web/docs/dependencies.md
index 83c4c16c8..3e9cb9a2f 100644
--- a/web/docs/dependencies.md
+++ b/web/docs/dependencies.md
@@ -133,17 +133,19 @@ some cases.
 
 ## Media
 
--   ["jszip"](https://github.com/Stuk/jszip) is used for reading zip files in
+-   [jszip](https://github.com/Stuk/jszip) is used for reading zip files in
     JavaScript (Live photos are zip files under the hood).
 
--   ["file-type"](https://github.com/sindresorhus/file-type) is used for MIME
-    type detection. We are at an old version 16.5.4 because v17 onwards the
-    package became ESM only - for our limited use case, the custom Webpack
-    configuration that entails is not worth the upgrade.
+-   [file-type](https://github.com/sindresorhus/file-type) is used for MIME type
+    detection. We are at an old version 16.5.4 because v17 onwards the package
+    became ESM only - for our limited use case, the custom Webpack configuration
+    that entails is not worth the upgrade.
 
 ## Photos app specific
 
-### Misc
+-   [react-dropzone](https://github.com/react-dropzone/react-dropzone/) is a
+    React hook to create a drag-and-drop input zone.
 
--   "sanitize-filename" is for converting arbitrary strings into strings that
-    are suitable for being used as filenames.
+-   [sanitize-filename](https://github.com/parshap/node-sanitize-filename) is
+    for converting arbitrary strings into strings that are suitable for being
+    used as filenames.
diff --git a/web/yarn.lock b/web/yarn.lock
index 972b14df1..2a50e3f95 100644
--- a/web/yarn.lock
+++ b/web/yarn.lock
@@ -2503,12 +2503,12 @@ file-entry-cache@^6.0.1:
   dependencies:
     flat-cache "^3.0.4"
 
-file-selector@^0.4.0:
-  version "0.4.0"
-  resolved "https://registry.yarnpkg.com/file-selector/-/file-selector-0.4.0.tgz#59ec4f27aa5baf0841e9c6385c8386bef4d18b17"
-  integrity sha512-iACCiXeMYOvZqlF1kTiYINzgepRBymz1wwjiuup9u9nayhb6g4fSwiyJ/6adli+EPwrWtpgQAh2PoS7HukEGEg==
+file-selector@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/file-selector/-/file-selector-0.6.0.tgz#fa0a8d9007b829504db4d07dd4de0310b65287dc"
+  integrity sha512-QlZ5yJC0VxHxQQsQhXvBaC7VRJ2uaxTf+Tfpu4Z/OcVQJVpZO+DGU0rkoVW5ce2SccxugvpBJoMvUs59iILYdw==
   dependencies:
-    tslib "^2.0.3"
+    tslib "^2.4.0"
 
 file-type@16.5.4:
   version "16.5.4"
@@ -3887,13 +3887,13 @@ react-dom@^18:
     loose-envify "^1.1.0"
     scheduler "^0.23.0"
 
-react-dropzone@^11.2.4:
-  version "11.7.1"
-  resolved "https://registry.yarnpkg.com/react-dropzone/-/react-dropzone-11.7.1.tgz#3851bb75b26af0bf1b17ce1449fd980e643b9356"
-  integrity sha512-zxCMwhfPy1olUEbw3FLNPLhAm/HnaYH5aELIEglRbqabizKAdHs0h+WuyOpmA+v1JXn0++fpQDdNfUagWt5hJQ==
+react-dropzone@^14.2:
+  version "14.2.3"
+  resolved "https://registry.yarnpkg.com/react-dropzone/-/react-dropzone-14.2.3.tgz#0acab68308fda2d54d1273a1e626264e13d4e84b"
+  integrity sha512-O3om8I+PkFKbxCukfIR3QAGftYXDZfOE2N1mr/7qebQJHs7U+/RSL/9xomJNpRg9kM5h9soQSdf0Gc7OHF5Fug==
   dependencies:
     attr-accept "^2.2.2"
-    file-selector "^0.4.0"
+    file-selector "^0.6.0"
     prop-types "^15.8.1"
 
 react-fast-compare@^2.0.1:
@@ -4592,7 +4592,7 @@ tsconfig-paths@^3.15.0:
     minimist "^1.2.6"
     strip-bom "^3.0.0"
 
-tslib@^2.0.0, tslib@^2.0.3, tslib@^2.4.0, tslib@^2.6.2:
+tslib@^2.0.0, tslib@^2.4.0, tslib@^2.6.2:
   version "2.6.2"
   resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.6.2.tgz#703ac29425e7b37cd6fd456e92404d46d1f3e4ae"
   integrity sha512-AEYxH93jGFPn/a2iVAwW87VuUIkR1FVUKB77NwMF7nBTDkDrrT/Hpt/IrCJ0QXhW27jTBDcf5ZY7w6RiqTMw2Q==