diff --git a/package-lock.json b/package-lock.json
index abd5bcc..544027a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "3box-api",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -2595,9 +2595,9 @@
       }
     },
     "dotenv": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-6.2.0.tgz",
-      "integrity": "sha512-HygQCKUBSFl8wKQZBSemMywRWcEDNidvNbjGVyZu3nbZ8qq9ubiPoGLMdRDpfSrpkkm9BXYFkpKxxFX38o/76w=="
+      "version": "9.0.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-9.0.2.tgz",
+      "integrity": "sha512-I9OvvrHp4pIARv4+x9iuewrWycX6CcZtoAu1XrzPxc5UygMJXJZYmBsynku8IkrJwgypE5DGNjDPmPRhDCptUg=="
     },
     "double-ended-queue": {
       "version": "2.1.0-0",
diff --git a/package.json b/package.json
index 75916ae..b41129b 100644
--- a/package.json
+++ b/package.json
@@ -34,7 +34,7 @@
     "datastore-level": "^1.1.0",
     "datastore-s3": "^2.0.0",
     "did-resolver": "^1.1.0",
-    "dotenv": "^6.2.0",
+    "dotenv": "^9.0.2",
     "exectimer": "^2.2.1",
     "express": "^4.16.4",
     "express-bunyan-logger": "^1.3.3",