diff --git a/package-lock.json b/package-lock.json
index 333b34ce3507..f171cfeff8be 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -39,7 +39,7 @@
         "cookie-parser": "^1.4.7",
         "cuss": "2.2.0",
         "dayjs": "^1.11.19",
-        "dotenv": "^17.3.1",
+        "dotenv": "^18.0.2",
         "express": "^5.2.1",
         "fastest-levenshtein": "1.0.16",
         "github-slugger": "^2.0.0",
@@ -7445,10 +7445,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.3.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
-      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==",
+      "version": "18.0.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.2.tgz",
+      "integrity": "sha512-wl0U3CxC0iobaryqEKpFJxzyp4AxQFYAKj/WWszXZr87vVHLi2yJv2syax5Vxt+u02xqNgE277rsc3lOKg9sPg==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index b03e0338d15d..f277252120b8 100644
--- a/package.json
+++ b/package.json
@@ -201,7 +201,7 @@
     "cookie-parser": "^1.4.7",
     "cuss": "2.2.0",
     "dayjs": "^1.11.19",
-    "dotenv": "^17.3.1",
+    "dotenv": "^18.0.2",
     "express": "^5.2.1",
     "fastest-levenshtein": "1.0.16",
     "github-slugger": "^2.0.0",