diff --git a/backend/src/index.js b/backend/src/index.js
index 24f8ded..4e0179f 100644
--- a/backend/src/index.js
+++ b/backend/src/index.js
@@ -5,7 +5,7 @@ const fs      = require('fs');
 require('./db');
 
 const app = express();
-app.use(express.json());
+app.use(express.json({ limit: '10mb' }));
 
 // ── Security Headers ──────────────────────────────────────────────────────────
 app.use((_req, res, next) => {