diff --git a/package-lock.json b/package-lock.json
index 3fa58d1..39884d9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "cookie-parser": "^1.4.7",
         "cors": "^2.8.6",
         "csrf": "^3.1.0",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.9",
         "express": "^5.3.0",
         "express-rate-limit": "^8.7.1",
         "express-validator": "^7.3.2",
@@ -5044,10 +5044,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.9",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.9.tgz",
+      "integrity": "sha512-3fVOW4cB02R066PUSwn8O4TJyz9NckQl7F81blIbaq9jKBm2tSmOKky7ZHIXzGvkVPXCSn6jkpziBPZdGFs8Tw==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index 542ec6c..a9a8916 100644
--- a/package.json
+++ b/package.json
@@ -77,7 +77,7 @@
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.6",
     "csrf": "^3.1.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.9",
     "express": "^5.3.0",
     "express-rate-limit": "^8.7.1",
     "express-validator": "^7.3.2",