diff --git a/package-lock.json b/package-lock.json
index 69ef18d2e0..48b9672058 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -29,7 +29,7 @@
         "connect-datadog": "0.0.9",
         "cookie-parser": "^1.4.6",
         "dayjs": "^1.11.3",
-        "dotenv": "^16.0.1",
+        "dotenv": "^16.4.5",
         "escape-string-regexp": "5.0.0",
         "express": "4.19.2",
         "express-rate-limit": "7.2.0",
@@ -4957,10 +4957,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.1",
-      "license": "BSD-2-Clause",
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
     "node_modules/duplexer": {
diff --git a/package.json b/package.json
index 8c8ad18d6c..02c4ae3e4d 100644
--- a/package.json
+++ b/package.json
@@ -212,7 +212,7 @@
     "connect-datadog": "0.0.9",
     "cookie-parser": "^1.4.6",
     "dayjs": "^1.11.3",
-    "dotenv": "^16.0.1",
+    "dotenv": "^16.4.5",
     "escape-string-regexp": "5.0.0",
     "express": "4.19.2",
     "express-rate-limit": "7.2.0",