diff --git a/apps/api/package.json b/apps/api/package.json
index 664dd933..7c60a8c1 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -44,7 +44,7 @@
 		"body-parser": "^2.2.0",
 		"cors": "^2.8.5",
 		"cron": "^4.1.4",
-		"dotenv": "^16.5.0",
+		"dotenv": "^17.4.2",
 		"express": "^5.1.0",
 		"express-session": "^1.18.1",
 		"express-validator": "^7.2.1",
diff --git a/yarn.lock b/yarn.lock
index 8a58e8dc..cf6c8e9a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6718,7 +6718,7 @@ __metadata:
     body-parser: "npm:^2.2.0"
     cors: "npm:^2.8.5"
     cron: "npm:^4.1.4"
-    dotenv: "npm:^16.5.0"
+    dotenv: "npm:^17.4.2"
     eslint: "npm:^9.24.0"
     eslint-plugin-import: "npm:^2.31.0"
     express: "npm:^5.1.0"
@@ -8365,13 +8365,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:^16.5.0":
-  version: 16.5.0
-  resolution: "dotenv@npm:16.5.0"
-  checksum: 10c0/5bc94c919fbd955bf0ba44d33922a1e93d1078e64a1db5c30faeded1d996e7a83c55332cb8ea4fae5a9ca4d0be44cbceb95c5811e70f9f095298df09d1997dd9
-  languageName: node
-  linkType: hard
-
 "dotenv@npm:^16.6.1":
   version: 16.6.1
   resolution: "dotenv@npm:16.6.1"
@@ -8379,6 +8372,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"dotenv@npm:^17.4.2":
+  version: 17.4.2
+  resolution: "dotenv@npm:17.4.2"
+  checksum: 10c0/164f8e77a646c8446867d5b588d26ea6005c8ea7c5eb41cf926f6113d23f2191355f6e0cfd95ea9bab98394a5b0a3f1e51a8399711b666fe55cc7b0bd745f942
+  languageName: node
+  linkType: hard
+
 "dunder-proto@npm:^1.0.0, dunder-proto@npm:^1.0.1":
   version: 1.0.1
   resolution: "dunder-proto@npm:1.0.1"