diff --git a/package.json b/package.json
index 9baaa86e..0b8fc645 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
     "body-parser": "2.2.0",
     "cli-progress": "3.12.0",
     "dayjs": "1.11.13",
-    "dotenv": "16.5.0",
+    "dotenv": "16.6.1",
     "express": "5.1.0",
     "express-async-handler": "1.2.0",
     "express-basic-auth": "1.2.1",
diff --git a/yarn.lock b/yarn.lock
index f5bff313..7c24369b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3521,10 +3521,10 @@ dot-case@^3.0.4:
     no-case "^3.0.4"
     tslib "^2.0.3"
 
-dotenv@16.5.0:
-  version "16.5.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.5.0.tgz#092b49f25f808f020050051d1ff258e404c78692"
-  integrity sha512-m/C+AwOAr9/W1UOIZUo232ejMNnJAJtYQjUbHoNTBNTJSvqzzDh7vnrei3o3r3m9blf6ZoDkvcw0VmozNRFJxg==
+dotenv@16.6.1:
+  version "16.6.1"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.6.1.tgz#773f0e69527a8315c7285d5ee73c4459d20a8020"
+  integrity sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==
 
 dunder-proto@^1.0.0, dunder-proto@^1.0.1:
   version "1.0.1"