diff --git a/package.json b/package.json
index 2ec9a57..280f62f 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "cookie-parser": "^1.4.5",
     "cors": "^2.8.6",
     "debug": "^4.3.1",
-    "dotenv": "^17.3.1",
+    "dotenv": "^17.4.0",
     "ejs": "^4.0.1",
     "express": "~5.2.1",
     "express-rate-limit": "^8.2.1",
diff --git a/yarn.lock b/yarn.lock
index 7357e1c..e480591 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -548,10 +548,10 @@ doctrine@^2.1.0:
   dependencies:
     esutils "^2.0.2"
 
-dotenv@^17.3.1:
-  version "17.3.1"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.3.1.tgz#2706f5b0165e45a1503348187b8468f87fe6aae2"
-  integrity sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==
+dotenv@^17.4.0:
+  version "17.4.0"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.4.0.tgz#9a5de24d7112a889b4b179ffbe83933298c41d37"
+  integrity sha512-kCKF62fwtzwYm0IGBNjRUjtJgMfGapII+FslMHIjMR5KTnwEmBmWLDRSnc3XSNP8bNy34tekgQyDT0hr7pERRQ==
 
 dunder-proto@^1.0.0, dunder-proto@^1.0.1:
   version "1.0.1"