diff --git a/package-lock.json b/package-lock.json
index 36a44fbb7d7d..d694f0c03664 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -27,7 +27,7 @@
         "cookie-parser": "^1.4.6",
         "cors": "^2.8.5",
         "dayjs": "^1.11.3",
-        "dotenv": "^16.0.1",
+        "dotenv": "^16.3.1",
         "express": "^4.18.1",
         "express-rate-limit": "6.7.0",
         "express-timeout-handler": "^2.2.2",
@@ -7687,10 +7687,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.1",
-      "license": "BSD-2-Clause",
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/motdotla/dotenv?sponsor=1"
       }
     },
     "node_modules/duplexer": {
@@ -24477,7 +24481,9 @@
       }
     },
     "dotenv": {
-      "version": "16.0.1"
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ=="
     },
     "duplexer": {
       "version": "0.1.2",
diff --git a/package.json b/package.json
index adf0a1e3423a..3a7d0779d432 100644
--- a/package.json
+++ b/package.json
@@ -74,7 +74,7 @@
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",
     "dayjs": "^1.11.3",
-    "dotenv": "^16.0.1",
+    "dotenv": "^16.3.1",
     "express": "^4.18.1",
     "express-rate-limit": "6.7.0",
     "express-timeout-handler": "^2.2.2",