diff --git a/.changeset/brave-pumas-attack.md b/.changeset/brave-pumas-attack.md
new file mode 100644
index 0000000000..b08e3e5ff3
--- /dev/null
+++ b/.changeset/brave-pumas-attack.md
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-openapi-utils': patch
+---
+
+Update `express-openapi-validator` to 5.5.8 to fix security vulnerability in transitive dependency `multer`