diff --git a/package-lock.json b/package-lock.json
index 228d6ac..69d85e0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2562,9 +2562,9 @@
       "license": "MIT"
     },
     "node_modules/dotenv": {
-      "version": "16.6.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
-      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
       "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
@@ -5490,7 +5490,7 @@
       "dependencies": {
         "better-sqlite3": "^12.8.0",
         "cors": "^2.8.5",
-        "dotenv": "^16.4.0",
+        "dotenv": "^17.4.2",
         "express": "^5.2.1",
         "ws": "^8.21.0"
       },
diff --git a/packages/server/package.json b/packages/server/package.json
index fda4647..22dd834 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "better-sqlite3": "^12.8.0",
     "cors": "^2.8.5",
-    "dotenv": "^16.4.0",
+    "dotenv": "^17.4.2",
     "express": "^5.2.1",
     "ws": "^8.21.0"
   },