diff --git a/package-lock.json b/package-lock.json
index 7c61f84b9016..0148324d4afc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -28,7 +28,7 @@
         "cookie-parser": "^1.4.6",
         "cors": "^2.8.5",
         "dayjs": "^1.11.3",
-        "dotenv": "^16.0.1",
+        "dotenv": "^16.3.1",
         "express": "^4.18.1",
         "express-rate-limit": "6.7.0",
         "express-timeout-handler": "^2.2.2",
@@ -5067,10 +5067,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.1",
-      "license": "BSD-2-Clause",
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/motdotla/dotenv?sponsor=1"
       }
     },
     "node_modules/duplexer": {
diff --git a/package.json b/package.json
index 51343774cd16..85bd66ac210b 100644
--- a/package.json
+++ b/package.json
@@ -77,7 +77,7 @@
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",
     "dayjs": "^1.11.3",
-    "dotenv": "^16.0.1",
+    "dotenv": "^16.3.1",
     "express": "^4.18.1",
     "express-rate-limit": "6.7.0",
     "express-timeout-handler": "^2.2.2",