diff --git a/package.json b/package.json
index 8ae8f3b..a35a42c 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "connect-mongo": "^4.5.0",
     "cookie-parser": "^1.4.6",
     "csurf": "^1.11.0",
-    "dotenv": "^8.2.0",
+    "dotenv": "^16.3.1",
     "ejs": "^3.1.8",
     "express": "^4.18.2",
     "express-rate-limit": "^6.6.0",
diff --git a/yarn.lock b/yarn.lock
index 46d0226..a7a61b6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3085,10 +3085,10 @@ dot-prop@^4.2.1:
   dependencies:
     is-obj "^1.0.0"
 
-dotenv@^8.2.0:
-  version "8.6.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.6.0.tgz#061af664d19f7f4d8fc6e4ff9b584ce237adcb8b"
-  integrity sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g==
+dotenv@^16.3.1:
+  version "16.3.1"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.3.1.tgz#369034de7d7e5b120972693352a3bf112172cc3e"
+  integrity sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==
 
 duplexify@^3.5.0, duplexify@^3.6.0:
   version "3.7.1"