diff --git a/app/Http/Controllers/BaseController.php b/app/Http/Controllers/BaseController.php
index 39190ee809fc..c06002899303 100644
--- a/app/Http/Controllers/BaseController.php
+++ b/app/Http/Controllers/BaseController.php
@@ -555,7 +555,7 @@ class BaseController extends Controller
     private function resolveQueryLimit(): int
     {
         if (request()->has('per_page')) {
-            return abs((int)request()->input('per_page', 20));
+            return min(abs((int)request()->input('per_page', 20)), 5000);
         }
 
         return 20;