diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6efa2b7984..d831c2d195 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -246,7 +246,7 @@ importers:
         version: 64.0.0(eslint@10.2.1(jiti@2.6.1))
       exiftool-vendored:
         specifier: ^35.0.0
-        version: 35.18.0
+        version: 35.19.0
       globals:
         specifier: ^17.0.0
         version: 17.5.0
@@ -444,8 +444,8 @@ importers:
         specifier: 4.4.0
         version: 4.4.0
       exiftool-vendored:
-        specifier: ^35.0.0
-        version: 35.18.0
+        specifier: ^35.20.0
+        version: 35.20.0
       express:
         specifier: ^5.1.0
         version: 5.2.1
@@ -5477,6 +5477,7 @@ packages:
 
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   '@valibot/to-json-schema@1.6.0':
     resolution: {integrity: sha512-d6rYyK5KVa2XdqamWgZ4/Nr+cXhxjy7lmpe6Iajw15J/jmU+gyxl2IEd1Otg1d7Rl3gOQL5reulnSypzBtYy1A==}
@@ -7547,13 +7548,26 @@ packages:
     resolution: {integrity: sha512-9ENCWzUiFy6F/O4jSX50ygSGrTOtvoqJFWE0zAOl7VL/EFooLWNF0LkaNSox0ibbIsQz5rWSKi0TPlEbF4qBIw==}
     os: [win32]
 
+  exiftool-vendored.exe@13.58.0:
+    resolution: {integrity: sha512-pV7SjQeOu4Q77DWuyF+hlRYWVlRcSAqfqTTujBZeGUy/Q9+RPAy877YgSZIxKOYW1TxmmL8KyBGxaG0JKYG8BQ==}
+    os: [win32]
+
   exiftool-vendored.pl@13.57.0:
     resolution: {integrity: sha512-7HYhrIygbfKD+E/sUF9L8YEs7qCEFLFWKoeevJllnD9jxVvZ09tfFsjbBPQ7SAgGwWSHW//SVULFHLgrO8JsBw==}
     os: ['!win32']
     hasBin: true
 
-  exiftool-vendored@35.18.0:
-    resolution: {integrity: sha512-QBtYNz71VAwZWqxFP1iWWS9qwOx3b9MSpk0GAMyIfS8gupUWsOyhn4i2WrB4OlRSQPuQ2YeKSw2fygi6E0LGiw==}
+  exiftool-vendored.pl@13.58.0:
+    resolution: {integrity: sha512-+Z2xhZrYLMu/anO/s14AaS/K5HMJ5Cw9C3KefIeYNpkZRN4RRBJHm7R34yjj9Pv+elqYRZrQV9NcqvkBLn/68w==}
+    os: ['!win32']
+    hasBin: true
+
+  exiftool-vendored@35.19.0:
+    resolution: {integrity: sha512-c7/W5VA0f2XKllRgFSBOoTSRMlRVn13QT/TudOS3RN64VRfcj51vQQcRwtmdwYuRrzRf7lsh6gCQpmm3vr8Lww==}
+    engines: {node: '>=20.0.0'}
+
+  exiftool-vendored@35.20.0:
+    resolution: {integrity: sha512-Yn66dSBaWGcUaSbm5Nl4G28rxtceLlWf4PstqJMbLix9sN7w0okWHPEvdudiP56Q5Cjl7v3TLyKKwowUFlbD8g==}
     engines: {node: '>=20.0.0'}
 
   expect-type@1.3.0:
@@ -12129,6 +12143,7 @@ packages:
 
   uuid@10.0.0:
     resolution: {integrity: sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==}
+    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
     hasBin: true
 
   uuid@11.1.0:
@@ -12141,6 +12156,7 @@ packages:
 
   uuid@8.3.2:
     resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==}
+    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
     hasBin: true
 
   valibot@1.3.1:
@@ -20304,9 +20320,14 @@ snapshots:
   exiftool-vendored.exe@13.57.0:
     optional: true
 
+  exiftool-vendored.exe@13.58.0:
+    optional: true
+
   exiftool-vendored.pl@13.57.0: {}
 
-  exiftool-vendored@35.18.0:
+  exiftool-vendored.pl@13.58.0: {}
+
+  exiftool-vendored@35.19.0:
     dependencies:
       '@photostructure/tz-lookup': 11.5.0
       '@types/luxon': 3.7.1
@@ -20317,6 +20338,17 @@ snapshots:
     optionalDependencies:
       exiftool-vendored.exe: 13.57.0
 
+  exiftool-vendored@35.20.0:
+    dependencies:
+      '@photostructure/tz-lookup': 11.5.0
+      '@types/luxon': 3.7.1
+      batch-cluster: 17.3.1
+      exiftool-vendored.pl: 13.58.0
+      he: 1.2.0
+      luxon: 3.7.2
+    optionalDependencies:
+      exiftool-vendored.exe: 13.58.0
+
   expect-type@1.3.0: {}
 
   exponential-backoff@3.1.3: {}
diff --git a/server/package.json b/server/package.json
index 22ada9e487..1d3a8588cd 100644
--- a/server/package.json
+++ b/server/package.json
@@ -72,7 +72,7 @@
     "cookie": "^1.0.2",
     "cookie-parser": "^1.4.7",
     "cron": "4.4.0",
-    "exiftool-vendored": "^35.0.0",
+    "exiftool-vendored": "^35.20.0",
     "express": "^5.1.0",
     "fast-glob": "^3.3.2",
     "fluent-ffmpeg": "^2.1.2",